CVE-2008-1887
published 2008-04-18CVE-2008-1887: Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to…
PriorityP343critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
6.29%
93.6th percentile
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| python | python | <= 2.5.2 | — |
| vmware | esxi | — | — |
| vmware | vmware_tools | — | — |
| vmware | vmware_vcenter_server | — | — |
| vmware | vmware_vsphere | — | — |
| vmware | vmware_workstation | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
vendor_ubuntu6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g8m8-g2vw-f7jw: Python 2
ghsa_unreviewed·2022-05-01
CVE-2008-1887 [HIGH] CWE-119 GHSA-g8m8-g2vw-f7jw: Python 2
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
VMware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
vendor_vmware·2009-11-20·CVSS 5.0
CVE-2007-2052 [MEDIUM] VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
VMSA-2009-0016: VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
a. JRE Security Update JRE update to version 1.5.0_20, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in JRE 1.5.0_18: CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1101, CVE-2009-1102, CVE-2009-1103, CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, and CVE-2009-1107. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in JRE 1.5.0_20: CVE-2009-
Red Hat
net-snmp: DoS (division by zero) via SNMP GetBulk requests
vendor_redhat·2009-06-25·CVSS 5.0
CVE-2009-1887 [MEDIUM] net-snmp: DoS (division by zero) via SNMP GetBulk requests
net-snmp: DoS (division by zero) via SNMP GetBulk requests
agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.
Ubuntu
Python vulnerabilities
vendor_ubuntu·2008-08-01·CVSS 6.8
CVE-2008-1679 [MEDIUM] Python vulnerabilities
Title: Python vulnerabilities
Summary: Python vulnerabilities
It was discovered that there were new integer overflows in the imageop
module. If an attacker were able to trick a Python application into
processing a specially crafted image, they could execute arbitrary code
with user privileges. (CVE-2008-1679)
Justin Ferguson discovered that the zlib module did not correctly
handle certain archives. If an attacker were able to trick a Python
application into processing a specially crafted archive file, they could
execute arbitrary code with user privileges. (CVE-2008-1721)
Justin Ferguson discovered that certain string manipulations in Python
could be made to overflow. If an attacker were able to pass a specially
crafted string through the PyString_FromStringAndSize function, they
could
Red Hat
python: PyString_FromStringAndSize does not check for negative size values
vendor_redhat·2008-04-08·CVSS 9.3
CVE-2008-1887 [CRITICAL] python: PyString_FromStringAndSize does not check for negative size values
python: PyString_FromStringAndSize does not check for negative size values
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests
bugzilla·2009-06-19·CVSS 5.0
CVE-2009-1887 [MEDIUM] CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests
CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests
It was discovered that remote attacker can cause net-snmp's snmpd to crash via specially crafted SNMP GetBulk requests, that triggers division by zero in the following code:
if (maxbulk maxresponses / r)
maxbulk = maxresponses / r;
This code has been added as part of the fix for CVE-2008-4309 (bug #469349). This problem never affected upstream net-snmp versions, thanks to following upstream commit from 2004:
http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/trunk/net-snmp/agent/snmp_agent.c?r1=9583&r2=9695
This upstream change is part of net-snmp packages shipped in Red Hat Enterprise Linux 4 and later. Therefore this division by zero DoS only affects net-snmp in Red Hat Enterprise Linux 3.
Discussion:
This i
Bugzilla
CVE-2008-1887 python: PyString_FromStringAndSize does not check for negative size values
bugzilla·2008-04-23·CVSS 7.5
CVE-2008-1887 [HIGH] CVE-2008-1887 python: PyString_FromStringAndSize does not check for negative size values
CVE-2008-1887 python: PyString_FromStringAndSize does not check for negative size values
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1887 to the following vulnerability:
Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
Refences:
http://bugs.python.org/issue2587
http://www.securityfocus.com/archive/1/490776
http://www.debian.org/security/2008/dsa-1551
Discussion:
Upstream SVN commits:
http://svn.python.org/view?rev=62262&view=rev
http://svn.python.org/view?rev=62261&view=rev
---
This really is a cause of CVE-2008-17
http://bugs.python.org/issue2587http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlhttp://secunia.com/advisories/29889http://secunia.com/advisories/30872http://secunia.com/advisories/31255http://secunia.com/advisories/31365http://secunia.com/advisories/31518http://secunia.com/advisories/31687http://secunia.com/advisories/33937http://secunia.com/advisories/37471http://security.gentoo.org/glsa/glsa-200807-01.xmlhttp://support.apple.com/kb/HT3438http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122http://www.debian.org/security/2008/dsa-1551http://www.debian.org/security/2008/dsa-1620http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900http://www.securityfocus.com/archive/1/490776http://www.securityfocus.com/archive/1/506056/100/0/threadedhttp://www.securityfocus.com/archive/1/507985/100/0/threadedhttp://www.securityfocus.com/bid/28749http://www.ubuntu.com/usn/usn-632-1http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlhttp://www.vupen.com/english/advisories/2009/3316https://exchange.xforce.ibmcloud.com/vulnerabilities/41944https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624http://bugs.python.org/issue2587http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlhttp://secunia.com/advisories/29889http://secunia.com/advisories/30872http://secunia.com/advisories/31255http://secunia.com/advisories/31365http://secunia.com/advisories/31518http://secunia.com/advisories/31687http://secunia.com/advisories/33937http://secunia.com/advisories/37471http://security.gentoo.org/glsa/glsa-200807-01.xmlhttp://support.apple.com/kb/HT3438http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0122http://www.debian.org/security/2008/dsa-1551http://www.debian.org/security/2008/dsa-1620http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900http://www.securityfocus.com/archive/1/490776http://www.securityfocus.com/archive/1/506056/100/0/threadedhttp://www.securityfocus.com/archive/1/507985/100/0/threadedhttp://www.securityfocus.com/bid/28749http://www.ubuntu.com/usn/usn-632-1http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlhttp://www.vupen.com/english/advisories/2009/3316https://exchange.xforce.ibmcloud.com/vulnerabilities/41944https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10407https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8624
2008-04-18
Published