Fluid Attacks Database

Description

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	python2.7	>=0 <2.7.3~rc1-1	2.7.3~rc1-1
rpm rhel6	python	<0:2.6.6-29.el6_2.2	0:2.6.6-29.el6_2.2

Aliases

1. CVE-2012-08452. NVD-2012-08453. OSV-DEBIAN-2012-08454. OSV-2012-08455. SECURITY-TRACKER-CVE-2012-0845

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.