CVE-2013-1753

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
pythonpython
2.7.0 ≤
𝑥
< 2.7.9
pythonpython
3.2.0 ≤
𝑥
< 3.2.6
pythonpython
3.3.0 ≤
𝑥
< 3.3.6
pythonpython
3.4.0 ≤
𝑥
< 3.4.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
jessie
postponed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
precise
Fixed 2.7.3-0ubuntu3.8
released
trusty
Fixed 2.7.6-8ubuntu0.2
released
utopic
Fixed 2.7.8-10ubuntu1.1
released
vivid
not-affected
python3.2
precise
Fixed 3.2.3-0ubuntu3.7
released
trusty
dne
utopic
dne
vivid
dne
python3.4
precise
dne
trusty
Fixed 3.4.0-2ubuntu1.1
released
utopic
Fixed 3.4.2-1ubuntu0.1
released
vivid
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpython2_7-1_0
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
libpython2_7-1_0-32bit
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
python
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-32bit
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
python-base
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-base-32bit
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
python-curses
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-demo
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
python-devel
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-doc
suse enterprise sap 12
2.7.9-14.3
fixed
suse enterprise server 12
2.7.9-14.3
fixed
python-doc-pdf
suse enterprise sap 12
2.7.9-14.3
fixed
suse enterprise server 12
2.7.9-14.3
fixed
python-gdbm
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-idle
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
python-tk
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
python-xml
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 12
2.7.9-14.1
fixed
suse enterprise sap 12 SP5
2.7.13-28.31.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.9-14.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
python
RHEL 7
0:2.7.5-34.el7
fixed
python-debug
RHEL 7
0:2.7.5-34.el7
fixed
python-devel
RHEL 7
0:2.7.5-34.el7
fixed
python-libs
RHEL 7
0:2.7.5-34.el7
fixed
python-test
RHEL 7
0:2.7.5-34.el7
fixed
python-tools
RHEL 7
0:2.7.5-34.el7
fixed
tkinter
RHEL 7
0:2.7.5-34.el7
fixed
References
https://bugs.python.org/issue16043
https://bugs.python.org/issue16043