CVE-2004-0150

Опубликовано: 15 апр. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.

Ссылки

http://www.debian.org/security/2004/dsa-458
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml
Third Party Advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019
Broken Link
http://www.osvdb.org/4172
Broken Link
http://www.securityfocus.com/bid/9836
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15409
VDB Entry
http://www.debian.org/security/2004/dsa-458
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml
Third Party Advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019
Broken Link
http://www.osvdb.org/4172
Broken Link
http://www.securityfocus.com/bid/9836
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15409
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.2 (исключая)

EPSS

Процентиль: 92%

0.08889

Низкий

7.5 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2004-0150

debian

около 21 года назад

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2 ...

GHSA-942q-qwfh-7rjq

github

около 3 лет назад