CVE-2008-3144 Integer overflow in n/a
Integer overflows in Python's string formatting allow attackers to cause denial of service or potentially execute code via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-3144?
CVE-2008-3144 is a medium-severity vulnerability in Python Python, published on 1 Aug 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.
Weakness: CWE-190
Which versions are affected by CVE-2008-3144?
It affects 1 product.
Products include Python Python.
How do I fix CVE-2008-3144?
Upgrade to a fixed version.
Is CVE-2008-3144 being exploited?
There is no known exploitation of CVE-2008-3144 in the wild and no public exploit code.
Other vulnerabilities in Python Python
Sources
Also known as AZL-109578, GHSA-jpm4-9q6q-mhwv, PSF-2008-8.