CVE-2013-1752

03.06.2019, 20:15

Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Ubuntu Releases

Ubuntu Product

Codename

python2.7

lucid	dne
precise	Fixed 2.7.3-0ubuntu3.8 released
quantal	ignored
raring	ignored
saucy	ignored
trusty	Fixed 2.7.6-8ubuntu0.2 released
utopic	Fixed 2.7.8-10ubuntu1.1 released
vivid	not-affected
wily	not-affected

python3.2

lucid	dne
precise	Fixed 3.2.3-0ubuntu3.7 released
quantal	ignored
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne

python3.4

lucid	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	not-affected
utopic	not-affected
vivid	not-affected
wily	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libpython2_7-1_0

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 12 SP1	2.7.9-20.6 fixed
suse enterprise server 12 SP2	2.7.9-24.2 fixed
suse enterprise server 12 SP3	2.7.13-27.1 fixed
suse enterprise server 12 SP4	2.7.13-28.11.2 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

libpython2_7-1_0-32bit

suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 12 SP1	2.7.9-20.6 fixed
suse enterprise server 12 SP2	2.7.9-24.2 fixed
suse enterprise server 12 SP3	2.7.13-27.1 fixed
suse enterprise server 12 SP4	2.7.13-28.11.2 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed

libpython3_4m1_0

suse enterprise server 12	3.4.1-2.38 fixed
suse enterprise server 12 SP1	3.4.1-12.1 fixed
suse enterprise server 12 SP2	3.4.1-12.1 fixed
suse enterprise server 12 SP3	3.4.6-24.1 fixed
suse enterprise server 12 SP4	3.4.6-25.16.1 fixed
suse enterprise server 12 SP5	3.4.6-25.29.1 fixed

libpython3_4m1_0-32bit

suse enterprise server 12 SP5

3.4.6-25.29.1

fixed

libpython3_6m1_0

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.8-2.13 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-32bit

suse enterprise server 12

2.7.9-14.1

fixed

python-base

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 12 SP1	2.7.9-20.6 fixed
suse enterprise server 12 SP2	2.7.9-24.2 fixed
suse enterprise server 12 SP3	2.7.13-27.1 fixed
suse enterprise server 12 SP4	2.7.13-28.11.2 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python-base-32bit

suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 12 SP1	2.7.9-20.6 fixed
suse enterprise server 12 SP2	2.7.9-24.2 fixed
suse enterprise server 12 SP3	2.7.13-27.1 fixed
suse enterprise server 12 SP4	2.7.13-28.11.2 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed

python-curses

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-demo

suse enterprise server 12

2.7.9-14.1

fixed

python-devel

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python-doc

suse enterprise server 12

2.7.9-14.3

fixed

python-doc-pdf

suse enterprise server 12

2.7.9-14.3

fixed

python-gdbm

suse enterprise desktop 15	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.2 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.2 fixed
suse enterprise sap 15	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.2 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.2 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 15	2.7.17-7.32.2 fixed
suse enterprise server 15 SP1	2.7.17-7.32.2 fixed
suse enterprise server 15 SP2	2.7.17-7.32.2 fixed
suse enterprise server 15 SP3	2.7.17-7.32.2 fixed

python-idle

suse enterprise server 12

2.7.9-14.1

fixed

python-tk

suse enterprise server 12

2.7.9-14.1

fixed

python-xml

suse enterprise desktop 15	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP1	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP2	2.7.17-7.32.1 fixed
suse enterprise desktop 15 SP3	2.7.17-7.32.1 fixed
suse enterprise sap 15	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP1	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP2	2.7.17-7.32.1 fixed
suse enterprise sap 15 SP3	2.7.17-7.32.1 fixed
suse enterprise server 12	2.7.9-14.1 fixed
suse enterprise server 12 SP1	2.7.9-20.6 fixed
suse enterprise server 12 SP2	2.7.9-24.2 fixed
suse enterprise server 12 SP3	2.7.13-27.1 fixed
suse enterprise server 12 SP4	2.7.13-28.11.2 fixed
suse enterprise server 12 SP5	2.7.13-28.31.1 fixed
suse enterprise server 15	2.7.17-7.32.1 fixed
suse enterprise server 15 SP1	2.7.17-7.32.1 fixed
suse enterprise server 15 SP2	2.7.17-7.32.1 fixed
suse enterprise server 15 SP3	2.7.17-7.32.1 fixed

python3

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-base

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 12	3.4.1-2.38 fixed
suse enterprise server 12 SP1	3.4.1-12.1 fixed
suse enterprise server 12 SP2	3.4.1-12.1 fixed
suse enterprise server 12 SP3	3.4.6-24.1 fixed
suse enterprise server 12 SP4	3.4.6-25.16.1 fixed
suse enterprise server 12 SP5	3.4.6-25.29.1 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-curses

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-dbm

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-devel

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-idle

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python3-tk

suse enterprise desktop 15	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP1	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP2	3.6.10-3.42.2 fixed
suse enterprise desktop 15 SP3	3.6.10-3.42.2 fixed
suse enterprise sap 15	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP1	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP2	3.6.10-3.42.2 fixed
suse enterprise sap 15 SP3	3.6.10-3.42.2 fixed
suse enterprise server 15	3.6.10-3.42.2 fixed
suse enterprise server 15 SP1	3.6.10-3.42.2 fixed
suse enterprise server 15 SP2	3.6.10-3.42.2 fixed
suse enterprise server 15 SP3	3.6.10-3.42.2 fixed

python36

suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.8-2.13 fixed

python36-base

suse enterprise server 12 SP3	3.6.8-6.14.1 fixed
suse enterprise server 12 SP5	3.6.8-2.13 fixed

python36-curses

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-dbm

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-devel

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-doc

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-testsuite

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-tk

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

python36-tools

suse enterprise server 12 SP3

3.6.8-6.14.1

fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

python

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

python-debug

RHEL 7

0:2.7.5-34.el7

fixed

python-devel

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

python-libs

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

python-test

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

python-tools

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

tkinter

RHEL 6	0:2.6.6-64.el6 fixed
RHEL 7	0:2.7.5-34.el7 fixed

Amazon Linux Releases

Amazon Package

Release

python26

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python26-debuginfo

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python26-devel

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python26-libs

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python26-test

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python26-tools

Amazon Linux 1

0:2.6.9-2.83.amzn1

fixed

python27

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed

python27-debuginfo

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed

python27-devel

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed

python27-libs

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed

python27-test

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed

python27-tools

Amazon Linux 1

0:2.7.9-4.114.amzn1

fixed