Fluid Attacks Database

Description

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	python2.7	>=0 <2.7.9-1	2.7.9-1
rpm rhel7	python	<0:2.7.5-34.el7	0:2.7.5-34.el7

Aliases

1. CVE-2013-17532. NVD-2013-17533. OSV-DEBIAN-2013-17534. OSV-2013-17535. SECURITY-TRACKER-CVE-2013-1753

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.