CVE-2008-2315 Integer overflow in n/a

High 7.5 Published Updated

Integer overflows in Python core modules allow context-dependent attackers to cause unknown impacts, requiring upgrades to patched versions.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is CVE-2008-2315?

CVE-2008-2315 is a high-severity vulnerability in Python Python, published on 1 Aug 2008.

Official description

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

Weakness: CWE-190

Which versions are affected by CVE-2008-2315?

It affects 1 product.

Products include Python Python.

How do I fix CVE-2008-2315?

Upgrade to a fixed version.

Is CVE-2008-2315 being exploited?

There is no known exploitation of CVE-2008-2315 in the wild and no public exploit code.

All Python Python vulnerabilities

Sources

Also known as AZL-109566, GHSA-75rq-49f3-27r2, PSF-2008-4.

Is CVE-2008-2315 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free