CVE-2008-1721

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
pythonpython
2.4.0 ≤
𝑥
< 2.4.6
pythonpython
2.5.0 ≤
𝑥
≤ 2.5.2
debiandebian_linux
4.0
canonicalubuntu_linux
6.06
canonicalubuntu_linux
7.04
canonicalubuntu_linux
7.10
canonicalubuntu_linux
8.04
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.4
dapper
Fixed 2.4.3-0ubuntu6.2
released
edgy
ignored
feisty
Fixed 2.4.4-2ubuntu7.2
released
gutsy
Fixed 2.4.4-6ubuntu4.2
released
hardy
not-affected
python2.5
dapper
dne
edgy
ignored
feisty
Fixed 2.5.1-0ubuntu1.2
released
gutsy
Fixed 2.5.1-5ubuntu5.2
released
hardy
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpython2_7-1_0
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-base
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-curses
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-devel
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-gdbm
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-xml
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
Common Weakness Enumeration
References
http://bugs.python.org/issue2586
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://secunia.com/advisories/29889
http://secunia.com/advisories/29955
http://secunia.com/advisories/30872
http://secunia.com/advisories/31255
http://secunia.com/advisories/31358
http://secunia.com/advisories/31365
http://secunia.com/advisories/33937
http://secunia.com/advisories/37471
http://secunia.com/advisories/38675
http://security.gentoo.org/glsa/glsa-200807-01.xml
http://securityreason.com/securityalert/3802
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289
http://support.apple.com/kb/HT3438
http://support.avaya.com/css/P8/documents/100074697
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149
http://www.debian.org/security/2008/dsa-1551
http://www.debian.org/security/2008/dsa-1620
http://www.mandriva.com/security/advisories?name=MDVSA-2008:085
http://www.securityfocus.com/archive/1/490690/100/0/threaded
http://www.securityfocus.com/archive/1/507985/100/0/threaded
http://www.securityfocus.com/bid/28715
http://www.securitytracker.com/id?1019823
http://www.ubuntu.com/usn/usn-632-1
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
http://www.vupen.com/english/advisories/2008/1229/references
http://www.vupen.com/english/advisories/2009/3316
https://exchange.xforce.ibmcloud.com/vulnerabilities/41748
https://issues.rpath.com/browse/RPL-2444
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407
http://bugs.python.org/issue2586
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://secunia.com/advisories/29889
http://secunia.com/advisories/29955
http://secunia.com/advisories/30872
http://secunia.com/advisories/31255
http://secunia.com/advisories/31358
http://secunia.com/advisories/31365
http://secunia.com/advisories/33937
http://secunia.com/advisories/37471
http://secunia.com/advisories/38675
http://security.gentoo.org/glsa/glsa-200807-01.xml
http://securityreason.com/securityalert/3802
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289
http://support.apple.com/kb/HT3438
http://support.avaya.com/css/P8/documents/100074697
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149
http://www.debian.org/security/2008/dsa-1551
http://www.debian.org/security/2008/dsa-1620
http://www.mandriva.com/security/advisories?name=MDVSA-2008:085
http://www.securityfocus.com/archive/1/490690/100/0/threaded
http://www.securityfocus.com/archive/1/507985/100/0/threaded
http://www.securityfocus.com/bid/28715
http://www.securitytracker.com/id?1019823
http://www.ubuntu.com/usn/usn-632-1
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
http://www.vupen.com/english/advisories/2008/1229/references
http://www.vupen.com/english/advisories/2009/3316
https://exchange.xforce.ibmcloud.com/vulnerabilities/41748
https://issues.rpath.com/browse/RPL-2444
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407