CVE-2013-1753

Published: Mar 11, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.

Affected (4)

Products: Python: Python

Python

1 product

Python

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Python Python	From 2.7.0 to 2.7.9
Python Python	From 3.2.0 to 3.2.6
Python Python	From 3.3.0 to 3.3.6
Python Python	From 3.4.0 to 3.4.3

References (2)

https://bugs.python.org/issue16043

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://bugs.python.org/issue16043

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.