CVE-2012-0845
CVE-2012-0845
This page contains facts from public vulnerability sources. Check the original advisory before updating.
SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
EPSS 5.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2012/02/13/4
- http://www.ubuntu.com/usn/USN-1615-1
- http://python.org/download/releases/3.2.3/
- http://bugs.python.org/issue14001
- http://secunia.com/advisories/51087
- http://www.ubuntu.com/usn/USN-1592-1
- http://www.securitytracker.com/id?1026689
- http://www.ubuntu.com/usn/USN-1616-1
- http://secunia.com/advisories/51040
- https://bugzilla.redhat.com/show_bug.cgi?id=789790
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
- http://secunia.com/advisories/50858
- http://secunia.com/advisories/51089
- http://python.org/download/releases/2.6.8/
- http://www.ubuntu.com/usn/USN-1596-1
- http://www.ubuntu.com/usn/USN-1613-2
- http://secunia.com/advisories/51024
- http://www.ubuntu.com/usn/USN-1613-1
- http://python.org/download/releases/3.1.5/
- http://python.org/download/releases/2.7.3/
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-0845