Buffer overflow in Python

CVE-2004-0150

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.

Vulnerability class: Buffer Overflow

EPSS: 0.053 (91.8th percentile) — read the EPSS interpretation.

Affected products

Python
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE, Broken Link)
cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)