Every CVE Search/ Get API key

CVE-2012-0845

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...

5.0 MediumFix available

CVE-2012-0845 is a medium vulnerability (CVSS 5.0) in Python, published October 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.40%, the 92nd percentile. Fixed in python2.7 2.7.3~rc1-1.

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Exploit likelihood

5.40%Up 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
CVE-2012-0845
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
CVE-2012-0845
Updated
2026-11-02
EUVDEUVD-2012-0870 No score

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
EUVD-2012-0870
Updated
2026-11-03
GitHub AdvisoriesGHSA-68xj-hf27-5jvq No score

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
GHSA-68xj-hf27-5jvq
Updated
2026-11-02
OSVAZL-109593 No score

CVE-2012-0845 affecting package python-py 1.11.0-1

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
AZL-109593
Updated
2026-11-02
OSV No score

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
CVE-2012-0845
Updated
2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2012-0845 No score

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
DEBIAN-CVE-2012-0845
Updated
2026-11-02
OSVopenSUSE-SU-2020:0086-1 No score

Security update for python3

This update for python3 to version 3.6.10 fixes the following issues:

  • CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
  • CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
  • CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0086-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10426-1 No score

libpython3_5m1_0-3.5.1-3.6 on GA media

These are all security issues fixed in the libpython3_5m1_0-3.5.1-3.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10426-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10536-1 No score

libpython2_7-1_0-2.7.12-1.4 on GA media

These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10536-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11283-1 No score

python310-3.10.0rc1-4.2 on GA media

These are all security issues fixed in the python310-3.10.0rc1-4.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11283-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11284-1 No score

python36-3.6.15-1.1 on GA media

These are all security issues fixed in the python36-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11284-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11285-1 No score

python38-3.8.12-1.2 on GA media

These are all security issues fixed in the python38-3.8.12-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11285-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11286-1 No score

python39-3.9.7-2.1 on GA media

These are all security issues fixed in the python39-3.9.7-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11286-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12089-1 No score

python311-3.11.0b1-1.1 on GA media

These are all security issues fixed in the python311-3.11.0b1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12089-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12910-1 No score

python312-3.12.0a7-1.1 on GA media

These are all security issues fixed in the python312-3.12.0a7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12910-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14109-1 No score

python313-3.13.0~b3-1.1 on GA media

These are all security issues fixed in the python313-3.13.0~b3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14109-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14434-1 No score

python314-3.14.0~a1-1.1 on GA media

These are all security issues fixed in the python314-3.14.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14434-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15713-1 No score

python315-3.15.0~a1-1.1 on GA media

These are all security issues fixed in the python315-3.15.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15713-1
Updated
2026-11-02
OSVPSF-2012-3 No score

XML-RPC DoS

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Record
PSF-2012-3
Updated
2026-11-02
OSVSUSE-FU-2022:0444-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Track already fixed issues.
Record
SUSE-FU-2022:0444-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2020:0114-1 No score

Security update for python3

This update for python3 to version 3.6.10 fixes the following issues:

  • CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
  • CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
  • CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).
Record
SUSE-SU-2020:0114-1
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1 No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python-py
Azure Linux:3
 through 1.11.0-1 None known
python2.7
Debian:11
 before 2.7.3~rc1-1
2.7.3~rc1-1
python2.6
Debian:6.0
 before 2.6.6-8+deb6u1, plus listed versions
2.6.6-8
2.6.6-8+deb6u1
python
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::client
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
Show 48 moreShow less
Affected packages
PackageAffectedFixed
python
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::computenode
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::server
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-libs
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
tkinter
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-test
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python-tools
Red Hat:enterprise_linux:6::workstation
 before 0:2.6.6-29.el6_2.2
0:2.6.6-29.el6_2.2
python3
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15
 before 3.6.10-3.42.2
3.6.10-3.42.2
python3-base
SUSE:Linux Enterprise Module for Development Tools 15 SP1
 before 3.6.10-3.42.2
3.6.10-3.42.2
python
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python3
openSUSE:Leap 15.1
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
python3-base
openSUSE:Leap 15.1
 before 3.6.10-lp151.6.7.1
3.6.10-lp151.6.7.1
python-base
openSUSE:Tumbleweed
 before 2.7.12-1.4
2.7.12-1.4
python
openSUSE:Tumbleweed
 before 2.7.18-8.1
2.7.18-8.1
python310
openSUSE:Tumbleweed
 before 3.10.0rc1-4.2
3.10.0rc1-4.2
python36
openSUSE:Tumbleweed
 before 3.6.15-1.1
3.6.15-1.1
python38
openSUSE:Tumbleweed
 before 3.8.12-1.2
3.8.12-1.2
python39
openSUSE:Tumbleweed
 before 3.9.7-2.1
3.9.7-2.1
python311
openSUSE:Tumbleweed
 before 3.11.0b1-1.1
3.11.0b1-1.1
python312
openSUSE:Tumbleweed
 before 3.12.0a7-1.1
3.12.0a7-1.1
python313
openSUSE:Tumbleweed
 before 3.13.0~b3-1.1
3.13.0~b3-1.1
python314
openSUSE:Tumbleweed
 before 3.14.0~a1-1.1
3.14.0~a1-1.1
python315
openSUSE:Tumbleweed
 before 3.15.0~a1-1.1
3.15.0~a1-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 655 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open