CVE-2016-5636
02.09.2016, 14:59
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| python | python | 3.0 |
| python | python | 3.0.1 |
| python | python | 3.1.0 |
| python | python | 3.1.1 |
| python | python | 3.1.2 |
| python | python | 3.1.3 |
| python | python | 3.1.4 |
| python | python | 3.1.5 |
| python | python | 3.2.0 |
| python | python | 3.2.1 |
| python | python | 3.2.2 |
| python | python | 3.2.3 |
| python | python | 3.2.4 |
| python | python | 3.2.5 |
| python | python | 3.2.6 |
| python | python | 3.3.0 |
| python | python | 3.3.1 |
| python | python | 3.3.2 |
| python | python | 3.3.3 |
| python | python | 3.3.4 |
| python | python | 3.3.5 |
| python | python | 3.3.6 |
| python | python | 3.4.0 |
| python | python | 3.4.1 |
| python | python | 3.4.2 |
| python | python | 3.4.3 |
| python | python | 3.4.4 |
| python | python | 𝑥 ≤ 2.7.11 |
| python | python | 3.5.0 |
| python | python | 3.5.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.7 |
| ||||||||||||||||||||||||||||||||
| python3.2 |
| ||||||||||||||||||||||||||||||||
| python3.4 |
| ||||||||||||||||||||||||||||||||
| python3.5 |
|
References