CVE-2008-2315
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...
7.5 High
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Exploit likelihood
4.38%Up 1.7 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
CVE-2008-2315- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
CVE-2008-2315- Updated
- 2026-11-02
EUVDEUVD-2008-2311 No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
EUVD-2008-2311- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-75rq-49f3-27r2 No score
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
GHSA-75rq-49f3-27r2- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVAZL-109566 No score
CVE-2008-2315 affecting package python-py 1.11.0-1
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
AZL-109566- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score
python-2.7.18-8.1 on GA media
These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11202-1- Updated
- 2026-11-02
OSVPSF-2008-4 No score
Multiple integer overflows (Apple)
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Record
PSF-2008-4- Updated
- 2026-11-02
OSVSUSE-SU-2020:0234-1 No score
Security update for python
This update for python fixes the following issues:
Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Record
SUSE-SU-2020:0234-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.4Debian:4.0 From an advisory covering 4 CVEs |
before 2.4.4-3+etch2, plus listed versions 2.4.4-32.4.4-3+etch1 |
2.4.4-3+etch2 |
python2.5Debian:5.0 From an advisory covering 4 CVEs |
before 2.5.2-6+lenny1 | 2.5.2-6+lenny1 |
pythonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pythonRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
python-toolsRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
tkinterRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:2.4.3-24.el5_3.6 | 0:2.4.3-24.el5_3.6 |
pythonRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-docsRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
python-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
tkinterRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-14.7.el4_8.2 | 0:2.3.4-14.7.el4_8.2 |
pythonRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-develRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
python-toolsRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
tkinterRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:2.2.3-6.11 | 0:2.2.3-6.11 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 37 CVEs |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 37 CVEs |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 37 CVEs |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 37 CVEs |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 37 CVEs |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 37 CVEs |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Python 2 15 SP1 From an advisory covering 37 CVEs |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Python 2 15 SP1 From an advisory covering 37 CVEs |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonopenSUSE:Tumbleweed From an advisory covering 40 CVEs |
before 2.7.18-8.1 | 2.7.18-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2315 is a high vulnerability (CVSS 7.5) in Python, published August 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.38%, the 91st percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
vupen.com/english/advisories/2008/2288
secunia.com/advisories/32793
exchange.xforce.ibmcloud.com/vulnerabilities/44173
securityfocus.com/bid/30491
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683
openwall.com/lists/oss-security/2008/11/05/3
vmware.com/security/advisories/VMSA-2009-0016.html
security.gentoo.org/glsa/glsa-200807-16.xml
support.apple.com/kb/HT3438
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
ubuntu.com/usn/usn-632-1
mandriva.com/security/advisories?name=MDVSA-2008:164
bugs.gentoo.org/show_bug.cgi?id=230640
support.avaya.com/css/P8/documents/100074697
novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
debian.org/security/2008/dsa-1667
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289
nvd.nist.gov/vuln/detail/CVE-2008-2315
github.com/advisories/GHSA-75rq-49f3-27r2
access.redhat.com/errata/RHSA-2009:1176
bugzilla.redhat.com/show_bug.cgi?id=235093
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json
cve.org/CVERecord?id=CVE-2007-2052
suse.com/support/update/announcement/2020/suse-su-20200234-1
bugzilla.suse.com/1027282
This page doesn't list everything
Left out here: 19 references. The JSON record has them.