QwikSec

Security Database

CVE

CWE

Training

CVE-2013-7338

Published: Apr 22, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20140318 CVE request for python/zipfile

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

openSUSE-SU-2014:0597

vendor-advisory

x_refsource_SUSE

http://hg.python.org/cpython/rev/79ea4ce431b1

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

APPLE-SA-2015-08-13-2

vendor-advisory

x_refsource_APPLE

http://bugs.python.org/issue20078

x_refsource_CONFIRM

[oss-security] 20140319 Re: CVE request for python/zipfile

mailing-list

x_refsource_MLIST

https://support.apple.com/kb/HT205031

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

https://docs.python.org/3.3/whatsnew/changelog.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.