Every CVE Search/ Get API key

CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...

7.5 HighPublic exploitFix available

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Exploit likelihood

22.6%Down 25.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
CVE-2008-1721
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-681
Updated
2026-11-02
CVE List No score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
CVE-2008-1721
Updated
2026-11-02
EUVDEUVD-2008-1722 No score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
EUVD-2008-1722
Updated
2026-11-03
GitHub AdvisoriesGHSA-3hc2-c7c2-f785 No score

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
GHSA-3hc2-c7c2-f785
Weakness
CWE-681
Updated
2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVPSF-2008-2 No score

Multiple integer overflows (Apple)

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Record
PSF-2008-2
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1 No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.4
Debian:4.0
 before 2.4.4-3+etch1, plus listed versions
2.4.4-3
2.4.4-3+etch1
python2.5
Debian:4.0
 before 2.5-5+etch1, plus listed versions
2.5-5
2.5-5+etch1
python
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::client
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
Show 37 moreShow less
Affected packages
PackageAffectedFixed
python-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-devel
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python-tools
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
tkinter
Red Hat:enterprise_linux:5::server
 before 0:2.4.3-24.el5_3.6
0:2.4.3-24.el5_3.6
python
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::as
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::desktop
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::es
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-docs
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python-tools
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
tkinter
Red Hat:enterprise_linux:4::ws
 before 0:2.3.4-14.7.el4_8.2
0:2.3.4-14.7.el4_8.2
python
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
openSUSE:Tumbleweed
 before 2.7.18-8.1
2.7.18-8.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPython zlib Module - Remote Buffer Overflow2008-04-09

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1721 is a high vulnerability (CVSS 7.5) in Python, published April 10, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.6%, the 97th percentile. Fixed in python2.4 2.4.4-3+etch1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 15 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open