Buffer overflow in Python - CVE-2004-0150
Published: August 2, 2023 / Updated: June 3, 2025
Vulnerability identifier: #VU110172
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2004-0150
CWE-ID: CWE-120
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
Affected software
Python
Gentoo Linux
dev-lang/python
Gentoo Linux
dev-lang/python
How to mitigate CVE-2004-0150
Install update from vendor's website.
Python - update to 2.2.2
dev-lang/python - update to 2.2.2
dev-lang/python - update to 2.2.2