Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2009:1178
The remote host is missing updates announced in
advisory RHSA-2009:1178.

Python is an interpreted, interactive, object-oriented programming

When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)

Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)

Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,

Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)

Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)

Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.

All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.

Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2008-1679
Debian Security Information: DSA-1551 (Google Search)
Debian Security Information: DSA-1620 (Google Search)
SuSE Security Announcement: SUSE-SR:2008:017 (Google Search)
XForce ISS Database: python-imageopc-bo(41958)
Common Vulnerability Exposure (CVE) ID: CVE-2008-1887
BugTraq ID: 28749
Bugtraq: 20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows (Google Search)
Bugtraq: 20090824 rPSA-2009-0122-1 idle python (Google Search)
Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search)
XForce ISS Database: python-pystringfromstringandsize-bo(41944)
Common Vulnerability Exposure (CVE) ID: CVE-2008-2315
BugTraq ID: 30491
Debian Security Information: DSA-1667 (Google Search)
XForce ISS Database: python-modules-bo(44172)
XForce ISS Database: python-multiple-bo(44173)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3142
Bugtraq: 20080813 rPSA-2008-0243-1 idle python (Google Search)
XForce ISS Database: python-unicode-bo(44170)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3143
Common Vulnerability Exposure (CVE) ID: CVE-2008-3144
XForce ISS Database: python-pyosvsnprintf-bo(44171)
Common Vulnerability Exposure (CVE) ID: CVE-2008-4864
BugTraq ID: 31932
BugTraq ID: 31976
XForce ISS Database: python-image-module-bo(46606)
Common Vulnerability Exposure (CVE) ID: CVE-2008-5031
XForce ISS Database: python-expandtabs-integer-overflow(46612)
CopyrightCopyright (c) 2009 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.