Known vulnerabilities in Python 2.5_final

Vendor: Python.org
Software: Python
Version: 2.5_final
Software CPE: cpe:2.3:a:python_org:python:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Python version 2.5_final Python 2.5_final is affected by 20 vulnerabilities: 5 high, 14 medium, 1 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112030 - Use After Free
CVE-2025-4516
CWE-416 Medium
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0b2 28.06.2025 SB2025062630
SB2025062802
SB2025062803
and 18 more
#VU111970 - Expected Behavior Violation
CVE-2025-4435
CWE-440 Low
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 59 more
#VU111969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12718
CWE-22 Medium
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 62 more
#VU111968 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4138
CWE-59 High
Public exploit available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 64 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330
CWE-59 High
No
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 63 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517
CWE-22 High
Public exploit available
No
3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU110159 - Improper input validation
CVE-2008-3144
CWE-20 Medium
No
No
- 02.08.2023 SB2023080288
SB2008073101
#VU110162 - Improper input validation
CVE-2008-2316
CWE-20 Medium
No
No
- 02.08.2023 SB2023080289
SB2008073101
#VU110164 - Improper input validation
CVE-2008-1679
CWE-20 Medium
No
No
2.5.3 02.08.2023 SB2023080296
SB2008070105
#VU110167 - Integer overflow
CVE-2007-4965
CWE-190 Medium
Public exploit available
No
- 02.08.2023 SB2023080291
SB2007110701
SB2008070105
#VU110160 - Integer overflow
CVE-2008-3143
CWE-190 Medium
No
No
2.5.2 02.08.2023 SB2023080295
SB2008073101
#VU110163 - Integer overflow
CVE-2008-2315
CWE-190 Medium
No
No
- 02.08.2023 SB2023080290
SB2008073101
#VU110158 - Integer overflow
CVE-2008-4864
CWE-190 Medium
Public exploit available
No
- 05.07.2022 SB2022070551
#VU110166 - Incorrect Conversion between Numeric Types
CVE-2008-1721
CWE-681 Medium
Public exploit available
No
- 05.07.2022 SB2022070553
SB2008070105
#VU110161 - Buffer overflow
CVE-2008-3142
CWE-120 Medium
No
No
- 05.07.2022 SB2022070552
SB2008073101
#VU110165 - Buffer overflow
CVE-2008-1887
CWE-120 High
No
No
- 27.06.2022 SB2022062741
SB2008070105
#VU110157 - Improper input validation
CVE-2008-5031
CWE-20 High
No
No
- 25.10.2019 SB2019102515
SB2009071901
#VU31958 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18348
CWE-74 Medium
No
No
2.7.18, 3.8.1 23.10.2019 SB2019102324
SB2020052312
SB2020042173
and 13 more
#VU32578 - Memory corruption
CVE-2014-1912
CWE-119 Medium
Public exploit available
No
2.7.7 01.03.2014 SB2014030101
SB2014022406
SB2014022606
and 2 more
#VU110142 - Improper input validation
CVE-2008-3144
CWE-20 Medium
No
No
- 01.08.2008 SB2008080101
SB2008073101