CVE-2008-2315

高 7.5CVE-2008-2315 · 01/08/2008 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
python python	`≤ 2.5.2`	修正版なし

概要

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

参考情報

bugs.gentoo.org/attachment.cgi · Exploit
bugs.gentoo.org/show_bug.cgi · Third Party Advisory
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html · Third Party Advisory
secunia.com/advisories/31305 · Broken Link
secunia.com/advisories/31332 · Broken Link
secunia.com/advisories/31358 · Broken Link
secunia.com/advisories/31365 · Broken Link
secunia.com/advisories/31518 · Broken Link
secunia.com/advisories/31687 · Broken Link
secunia.com/advisories/32793 · Broken Link
secunia.com/advisories/33937 · Broken Link
secunia.com/advisories/37471 · Broken Link
secunia.com/advisories/38675 · Broken Link
security.gentoo.org/glsa/glsa-200807-16.xml · Third Party Advisory
slackware.com/security/viewer.php · Third Party Advisory
support.apple.com/kb/HT3438 · Third Party Advisory
support.avaya.com/css/P8/documents/100074697 · Third Party Advisory
debian.org/security/2008/dsa-1667 · Third Party Advisory
mandriva.com/security/advisories · Broken Link
mandriva.com/security/advisories · Broken Link
novell.com/support/search.do · Third Party Advisory
openwall.com/lists/oss-security/2008/11/05/2 · Mailing List
openwall.com/lists/oss-security/2008/11/05/3 · Mailing List
securityfocus.com/archive/1/507985/100/0/threaded · Third Party Advisory
securityfocus.com/bid/30491 · Third Party Advisory
ubuntu.com/usn/usn-632-1 · Third Party Advisory
vmware.com/security/advisories/VMSA-2009-0016.html · Third Party Advisory
vupen.com/english/advisories/2008/2288 · Broken Link
vupen.com/english/advisories/2009/3316 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/44172 · VDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/44173 · VDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 · Broken Link

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン