Home > Vulnerability Database > CVE-2008-2315

Mend.io Vulnerability Database

CVE-2008-2315

Date: August 1, 2008

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

Severity Score

7.3

Related Resources (40)

Url: http://secunia.com/advisories/32793

Url: http://www.vupen.com/english/advisories/2009/3316

Url: http://secunia.com/advisories/38675

Url: http://secunia.com/advisories/31305

Url: http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Url: http://secunia.com/advisories/31687

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683

Url: https://access.redhat.com/security/cve/CVE-2008-2315

Url: http://secunia.com/advisories/31365

Url: http://www.debian.org/security/2008/dsa-1667

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445

Url: http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900

Url: http://support.apple.com/kb/HT3438

Url: http://secunia.com/advisories/37471

Url: http://www.ubuntu.com/usn/usn-632-1

Url: http://www.vupen.com/english/advisories/2008/2288

Url: http://bugs.gentoo.org/attachment.cgi?id=159418&action=view

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-2315

Url: http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289

Url: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Url: http://secunia.com/advisories/31358

Url: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761

Url: http://secunia.com/advisories/31332

Url: http://www.securityfocus.com/bid/30491

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:163

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:164

Url: http://security.gentoo.org/glsa/glsa-200807-16.xml

Url: http://secunia.com/advisories/31518

Url: https://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Url: http://bugs.gentoo.org/show_bug.cgi?id=230640

Url: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Url: http://secunia.com/advisories/33937

Url: http://support.avaya.com/css/P8/documents/100074697

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/44173

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2008-2315

Url: http://www.openwall.com/lists/oss-security/2008/11/05/2

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/44172

Url: http://www.openwall.com/lists/oss-security/2008/11/05/3

Url: https://www.mend.io/vulnerability-database/CVE-2008-2315

Severity Score

7.3

Weakness Type (CWE)

Integer Overflow or Wraparound

CWE-190

Numeric Errors

CWE-189

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-2315

Date: August 1, 2008

Severity Score

Related Resources (40)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?