CVE-2012-0845

Advisory lineage Upstream: 0 Downstream: 17
Modified
Published: 05 Oct 2012, 21:00
Last modified:06 Aug 2024, 18:38

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
2.77% LOW
3% probability -0.48%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

05 Oct 2012, 21:00
Published
Vulnerability first disclosed
06 Aug 2024, 18:38
Last Modified
Vulnerability information updated

Description

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

CVSS Metrics

  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 2.77%• Percentile: 86%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • python•python

    ≤ 2.6.7 | 0.9.0 | 0.9.1 | 1.2 | 1.3 | 1.5.2 | 1.6 | 1.6.1 | 2.0 | 2.0.1 | 2.1 | 2.1.1 | 2.1.2 | 2.1.3 | 2.2 | 2.2.1 | 2.2.2 | 2.2.3 | 2.3.1 | 2.3.2 | 2.3.3 | 2.3.4 | 2.3.5 | 2.3.7 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.6 | 2.5.1 | 2.5.2 | 2.5.3 | 2.5.4 | 2.5.6 | 2.5.150 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.2150 | 2.6.6150 | 2.7.1 | 2.7.1:rc1 | 2.7.2:rc1 | 2.7.1150 | 2.7.2150 | 3.0 | 3.0.1 | 3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.2 | 3.2:alpha | 3.2.2150

References (21)