Every CVESearch/Get API key

CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...

7.5 HighPublic exploit

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Exploit likelihood

22.6%Down 25.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.5

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
CVE-2008-1721
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-681
Updated
2026-11-02
CVE ListNo score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
CVE-2008-1721
Updated
2026-11-02
EUVDEUVD-2008-1722No score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
EUVD-2008-1722
Updated
2026-11-03
GitHub AdvisoriesGHSA-3hc2-c7c2-f785No score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
GHSA-3hc2-c7c2-f785
Weakness
CWE-681
Updated
2026-11-02
OSVopenSUSE-SU-2024:11202-1No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVPSF-2008-2No score

Multiple integer overflows (Apple)

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
PSF-2008-2
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.4
Debian:4.0
From an advisory covering 5 CVEs
before 2.4.4-3+etch1, plus listed versions
2.4.4-3
2.4.4-3+etch1
python2.5
Debian:4.0
From an advisory covering 5 CVEs
before 2.5-5+etch1, plus listed versions
2.5-5
2.5-5+etch1
python
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
Show 37 moreShow less
Affected packages
PackageAffectedFixed
python-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
before 2.7.17-7.32.1
2.7.17-7.32.1
python
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
before 2.7.18-8.1
2.7.18-8.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPython zlib Module - Remote Buffer Overflow2008-04-09

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1721 is a high vulnerability (CVSS 7.5) in Python, published April 10, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.6%, the 97th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 15 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open