CVE-2008-2315
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...
CVE-2008-2315 is a high vulnerability (CVSS 7.5) in Python, published August 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.38%, the 91st percentile. Fixed in python2.4 2.4.4-3+etch2.
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
CVE-2008-2315- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
CVE-2008-2315- Updated
- 2026-11-02
EUVDEUVD-2008-2311 No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
EUVD-2008-2311- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-75rq-49f3-27r2 No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
GHSA-75rq-49f3-27r2- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVAZL-109566 No score
CVE-2008-2315 affecting package python-py 1.11.0-1
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
AZL-109566- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score
python-2.7.18-8.1 on GA media
These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11202-1- Updated
- 2026-11-02
OSVPSF-2008-4 No score
Multiple integer overflows (Apple)
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
PSF-2008-4- Updated
- 2026-11-02
OSVSUSE-SU-2020:0234-1 No score
Security update for python
This update for python fixes the following issues:
Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Record
SUSE-SU-2020:0234-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.4Debian:4.0 |
before 2.4.4-3+etch2, plus listed versions 2.4.4-32.4.4-3+etch1 |
2.4.4-3+etch2 |
python2.5Debian:5.0 |
before 2.5.2-6+lenny1 | 2.5.2-6+lenny1 |
pythonRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::client |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pythonRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::server |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Python 2 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Python 2 15 SP1 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonopenSUSE:Tumbleweed |
before 2.7.18-8.1 | 2.7.18-8.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
vupen.com/english/advisories/2008/2288
secunia.com/advisories/32793
exchange.xforce.ibmcloud.com/vulnerabilities/44173
securityfocus.com/bid/30491
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683
openwall.com/lists/oss-security/2008/11/05/3
vmware.com/security/advisories/VMSA-2009-0016.html
security.gentoo.org/glsa/glsa-200807-16.xml
support.apple.com/kb/HT3438
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
ubuntu.com/usn/usn-632-1
mandriva.com/security/advisories?name=MDVSA-2008:164
bugs.gentoo.org/show_bug.cgi?id=230640
support.avaya.com/css/P8/documents/100074697
novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
debian.org/security/2008/dsa-1667
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289
nvd.nist.gov/vuln/detail/CVE-2008-2315
github.com/advisories/GHSA-75rq-49f3-27r2
access.redhat.com/errata/RHSA-2009:1176
bugzilla.redhat.com/show_bug.cgi?id=235093
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json
cve.org/CVERecord?id=CVE-2007-2052
suse.com/support/update/announcement/2020/suse-su-20200234-1
bugzilla.suse.com/1027282
Left out here: 19 references. The JSON record has them.