Input validation error in Python - CVE-2013-1753

Vulnerability identifier: #VU110145

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-1753

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.

Python
openEuler
python2
python2-debug
python2-debuginfo
python2-debugsource
python2-devel
python2-help
python2-tkinter
python2-tools

Install update from vendor's website.

python2 - update to 2.7.18-2
python2-debug - update to 2.7.18-2
python2-debuginfo - update to 2.7.18-2
python2-debugsource - update to 2.7.18-2
python2-devel - update to 2.7.18-2
python2-help - update to 2.7.18-2
python2-tkinter - update to 2.7.18-2
python2-tools - update to 2.7.18-2

• https://bugs.python.org/issue16043

• Input validation error in Python
• openEuler 20.03 LTS update for python2