CVE-2012-0845
CVE-2012-0845
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
EPSS 5,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- http://www.openwall.com/lists/oss-security/2012/02/13/4
- http://www.ubuntu.com/usn/USN-1615-1
- http://python.org/download/releases/3.2.3/
- http://bugs.python.org/issue14001
- http://secunia.com/advisories/51087
- http://www.ubuntu.com/usn/USN-1592-1
- http://www.securitytracker.com/id?1026689
- http://www.ubuntu.com/usn/USN-1616-1
- http://secunia.com/advisories/51040
- https://bugzilla.redhat.com/show_bug.cgi?id=789790
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
- http://secunia.com/advisories/50858
- http://secunia.com/advisories/51089
- http://python.org/download/releases/2.6.8/
- http://www.ubuntu.com/usn/USN-1596-1
- http://www.ubuntu.com/usn/USN-1613-2
- http://secunia.com/advisories/51024
- http://www.ubuntu.com/usn/USN-1613-1
- http://python.org/download/releases/3.1.5/
- http://python.org/download/releases/2.7.3/
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-0845