Integer overflow in Python - CVE-2018-20406

Vulnerability identifier: #VU18403

CSH Severity: Low

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-20406

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to integer overflow in modules/_pickle.c when processing a large LONG_BINPUT value during the "resize to twice the size" attempt. A remote attacker can supply overly large data, trigger integer overflow and exhaust all resources on the system.

Python
Red Hat Software Collections
python3 (Alpine package)
python3.7 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.11 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.8 (Ubuntu package)
python34
python35
python36
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python3.12-minimal (Ubuntu package)
python3.12 (Ubuntu package)
Fedora
Ubuntu
Opensuse
IBM Cloud Transformation Advisor
IBM Robotic Process Automation

Install updates from vendor's website.

Python - update to 3.7.1
python3 (Alpine package) - update to 3.6.8-r0
python3.7 (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - update to Ubuntu Pro
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python34 - addressed in versions 3.4.10-1.el6, 3.4.10-1.el7, 3.4.10-1.fc28, 3.4.10-1.fc29, 3.4.10-1.fc30
python35 - addressed in versions 3.5.7-1.fc28, 3.5.7-1.fc29, 3.5.7-1.fc30
python36 - update to 3.6.8-1.el7
IBM Cloud Transformation Advisor - update to 3.10.1
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
IBM Robotic Process Automation - update to 21.0.5

• https://bugs.python.org/issue34656
• https://github.com/python/cpython/commit/a4ae828ee416a66d8c7bf5ee71d653c2cc6a26dd
• https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/
• https://security.netapp.com/advisory/ntap-20190416-0010/

• Amazon Linux AMI update for python34
• OpenSUSE Linux update for python3
• Red Hat update for rh-python36-python
• Integer overflow in python3 (Alpine package)
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Ubuntu update for python3.10
• Fedora 30 update for python34
• Fedora 30 update for python35
• Fedora 29 update for python35
• Fedora 29 update for python34
• Fedora 28 update for python34
• Fedora 28 update for python35
• Fedora EPEL 6 update for python34
• Fedora EPEL 7 update for python34
• Fedora EPEL 7 update for python36
• Multiple vulnerabilities in IBM Cloud Transformation Advisor