vulnwire
5.0med

CVE-2007-20521 exploit

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be u…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.6%
percentile 96%
Public exploits
1
Exploit-DB

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Exploit prediction (EPSS)

13.64% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-30018 Python 2.5 - 'PyLocale_strxfrm' Remote Information Leak · remote · 2007-05-08

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness

References

  • lists.vmware.com /pipermail/security-announce/2008/000005.html · mailing-list, x_refsource_MLIST, x_transferred
  • secunia.com /advisories/28050 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25190 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25217 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/37471 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • python.org /download/releases/2.5.1/NEWS.txt · x_refsource_CONFIRM, x_transferred
  • bugs.debian.org /cgi-bin/bugreport.cgi?bug=416934 · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2008/dsa-1551 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vmware.com /security/advisories/VMSA-2009-0016.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/29303 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/1465 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/29032 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31492 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8353 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /archive/1/469294/30/6450/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • redhat.com /support/errata/RHSA-2008-0629.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • redhat.com /support/errata/RHSA-2007-1077.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /archive/1/488457/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • redhat.com /support/errata/RHSA-2007-1076.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /archive/1/507985/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2008/0637 · vdb-entry, x_refsource_VUPEN, x_transferred
  • bugzilla.redhat.com /bugzilla/show_bug.cgi?id=235093 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/25353 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25233 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • issues.rpath.com /browse/RPL-1358 · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/usn-585-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • trustix.org /errata/2007/0019/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • secunia.com /advisories/28027 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • novell.com /linux/security/advisories/2007_13_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/31255 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2008/dsa-1620 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/25787 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/23887 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34060 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11716 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • vupen.com /english/advisories/2009/3316 · vdb-entry, x_refsource_VUPEN, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:099 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/29889 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.