CVE-2012-0845
CVE-2012-0845
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
EPSS 5,4% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
Originalquellen
- http://www.openwall.com/lists/oss-security/2012/02/13/4
- http://www.ubuntu.com/usn/USN-1615-1
- http://python.org/download/releases/3.2.3/
- http://bugs.python.org/issue14001
- http://secunia.com/advisories/51087
- http://www.ubuntu.com/usn/USN-1592-1
- http://www.securitytracker.com/id?1026689
- http://www.ubuntu.com/usn/USN-1616-1
- http://secunia.com/advisories/51040
- https://bugzilla.redhat.com/show_bug.cgi?id=789790
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
- http://secunia.com/advisories/50858
- http://secunia.com/advisories/51089
- http://python.org/download/releases/2.6.8/
- http://www.ubuntu.com/usn/USN-1596-1
- http://www.ubuntu.com/usn/USN-1613-2
- http://secunia.com/advisories/51024
- http://www.ubuntu.com/usn/USN-1613-1
- http://python.org/download/releases/3.1.5/
- http://python.org/download/releases/2.7.3/
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-0845