{"id":"CVE-2008-2315","aliases":["AZL-109566","DSA-1667-1","DTSA-157-1","EUVD-2008-2311","GHSA-75rq-49f3-27r2","PSF-2008-4","RHSA-2009:1176","RHSA-2009:1177","RHSA-2009:1178","SUSE-SU-2020:0234-1","openSUSE-SU-2024:11202-1"],"status":"published","title":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04381,"percentile":0.91357,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2008-08-01T14:00:00Z","modified":"2026-10-27T05:36:16Z","affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"python2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-3+etch2"}]}],"versions":["2.4.4-3","2.4.4-3+etch1"],"bundled":4},{"source":"osv","ecosystem":"Debian:5.0","package":"python2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-6+lenny1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.3-24.el5_3.6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.4-14.7.el4_8.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-6.11"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-8.1"}]}],"bundled":40}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2288","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32793","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44173","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/30491","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/38675","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/33937","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/37471","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List"]},{"url":"http://secunia.com/advisories/31687","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/05/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200807-16.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3438","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List"]},{"url":"http://secunia.com/advisories/31358","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/31332","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-632-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:164","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31518","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44172","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"http://secunia.com/advisories/31305","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=230640","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/31365","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://support.avaya.com/css/P8/documents/100074697","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.novell.com/support/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=InfoDocument-patchbuilder-readme5032900","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://bugs.gentoo.org/attachment.cgi?id=159418\u0026action=view","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"http://www.debian.org/security/2008/dsa-1667","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:163","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.525289","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2315","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-75rq-49f3-27r2"},{"url":"https://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1176","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=235093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=295971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=442005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=443810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=454990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470915","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1176.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4965","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4965","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1721","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-2315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2315","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4864","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4864","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5031","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1177","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=441306","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1177.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-1679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-1679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1679","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1178","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1178.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027282","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1068664","tags":["report"]},{"url":"https://bugzilla.suse.com/1073269","tags":["report"]},{"url":"https://bugzilla.suse.com/1073748","tags":["report"]},{"url":"https://bugzilla.suse.com/1078326","tags":["report"]},{"url":"https://bugzilla.suse.com/1078485","tags":["report"]},{"url":"https://bugzilla.suse.com/1079300","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1083507","tags":["report"]},{"url":"https://bugzilla.suse.com/1084650","tags":["report"]},{"url":"https://bugzilla.suse.com/1086001","tags":["report"]},{"url":"https://bugzilla.suse.com/1088004","tags":["report"]},{"url":"https://bugzilla.suse.com/1088009","tags":["report"]},{"url":"https://bugzilla.suse.com/1109847","tags":["report"]},{"url":"https://bugzilla.suse.com/1111793","tags":["report"]},{"url":"https://bugzilla.suse.com/1113755","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1129346","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1130847","tags":["report"]},{"url":"https://bugzilla.suse.com/1138459","tags":["report"]},{"url":"https://bugzilla.suse.com/1141853","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1149955","tags":["report"]},{"url":"https://bugzilla.suse.com/1153238","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1159035","tags":["report"]},{"url":"https://bugzilla.suse.com/214983","tags":["report"]},{"url":"https://bugzilla.suse.com/298378","tags":["report"]},{"url":"https://bugzilla.suse.com/346490","tags":["report"]},{"url":"https://bugzilla.suse.com/367853","tags":["report"]},{"url":"https://bugzilla.suse.com/379534","tags":["report"]},{"url":"https://bugzilla.suse.com/380942","tags":["report"]},{"url":"https://bugzilla.suse.com/399190","tags":["report"]},{"url":"https://bugzilla.suse.com/406051","tags":["report"]},{"url":"https://bugzilla.suse.com/425138","tags":["report"]},{"url":"https://bugzilla.suse.com/426563","tags":["report"]},{"url":"https://bugzilla.suse.com/430761","tags":["report"]},{"url":"https://bugzilla.suse.com/432677","tags":["report"]},{"url":"https://bugzilla.suse.com/436966","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/441088","tags":["report"]},{"url":"https://bugzilla.suse.com/462375","tags":["report"]},{"url":"https://bugzilla.suse.com/525295","tags":["report"]},{"url":"https://bugzilla.suse.com/534721","tags":["report"]},{"url":"https://bugzilla.suse.com/551715","tags":["report"]},{"url":"https://bugzilla.suse.com/572673","tags":["report"]},{"url":"https://bugzilla.suse.com/577032","tags":["report"]},{"url":"https://bugzilla.suse.com/581765","tags":["report"]},{"url":"https://bugzilla.suse.com/603255","tags":["report"]},{"url":"https://bugzilla.suse.com/617751","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/638233","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/682554","tags":["report"]},{"url":"https://bugzilla.suse.com/697251","tags":["report"]},{"url":"https://bugzilla.suse.com/707667","tags":["report"]},{"url":"https://bugzilla.suse.com/718009","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/747794","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/766778","tags":["report"]},{"url":"https://bugzilla.suse.com/794139","tags":["report"]},{"url":"https://bugzilla.suse.com/804978","tags":["report"]},{"url":"https://bugzilla.suse.com/827982","tags":["report"]},{"url":"https://bugzilla.suse.com/831442","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/836739","tags":["report"]},{"url":"https://bugzilla.suse.com/856835","tags":["report"]},{"url":"https://bugzilla.suse.com/856836","tags":["report"]},{"url":"https://bugzilla.suse.com/857470","tags":["report"]},{"url":"https://bugzilla.suse.com/863741","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/898572","tags":["report"]},{"url":"https://bugzilla.suse.com/901715","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/945401","tags":["report"]},{"url":"https://bugzilla.suse.com/964182","tags":["report"]},{"url":"https://bugzilla.suse.com/984751","tags":["report"]},{"url":"https://bugzilla.suse.com/985177","tags":["report"]},{"url":"https://bugzilla.suse.com/985348","tags":["report"]},{"url":"https://bugzilla.suse.com/989523","tags":["report"]},{"url":"https://bugzilla.suse.com/997436","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9948","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3737","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2008-2315","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2008-08-01T14:00:00Z","modified":"2024-08-07T08:58:01.529Z","updated_at":"2026-11-02T14:34:45.083276Z"}],"euvd":[{"id":"EUVD-2008-2311","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2008-08-01T14:00:00Z","modified":"2024-08-07T08:58:01Z","updated_at":"2026-11-03T01:38:57.722373Z"}],"ghsa":[{"id":"GHSA-75rq-49f3-27r2","title":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have...","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2022-05-01T23:48:50Z","modified":"2023-08-02T18:30:22Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:54:43.567376Z"}],"nvd":[{"id":"CVE-2008-2315","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2008-08-01T14:41:00Z","modified":"2026-06-16T22:53:31.8Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:01:27.800088Z"}],"osv":[{"id":"AZL-109566","title":"CVE-2008-2315 affecting package python-py 1.11.0-1","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2008-08-01T14:41:00Z","modified":"2026-10-27T05:36:16Z","updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"DSA-1667-1","title":"python2.4 - several vulnerabilities","status":"published","published":"2008-11-19T00:00:00Z","modified":"2026-03-09T01:19:01.293199Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"DTSA-157-1","title":"python2.5 - multiple vulnerabilities","status":"published","published":"2008-08-17T00:00:00Z","modified":"2026-03-09T01:01:24.279759Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"openSUSE-SU-2024:11202-1","title":"python-2.7.18-8.1 on GA media","description":"These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:22.875083Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"PSF-2008-4","title":"Multiple integer overflows (Apple)","description":"Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.","status":"published","published":"2008-08-01T14:00:00Z","modified":"2025-10-09T01:05:59.207987Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHSA-2009:1176","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-15T17:44:38Z","modified":"2026-06-26T12:19:09.393100063Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1177","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-15T17:44:43Z","modified":"2026-06-26T10:11:40Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1178","title":"Red Hat Security Advisory: python security update","status":"published","published":"2024-09-15T17:44:47Z","modified":"2026-06-26T10:11:41Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"SUSE-SU-2020:0234-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\nUpdated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).\n","status":"published","published":"2020-01-24T15:34:18Z","modified":"2025-05-02T04:03:47.841058Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}