CVEvulnerability
CVE-2004-0150
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-04-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
Affected configurations
• python python (>= 2.2.0 < 2.2.2)
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://www.debian.org/security/2004/dsa-458 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml Third Party Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019 Broken Link
- http://www.osvdb.org/4172 Broken Link
- http://www.securityfocus.com/bid/9836 Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15409 VDB Entry
- http://www.debian.org/security/2004/dsa-458 Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml Third Party Advisory
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019 Broken Link
- http://www.osvdb.org/4172 Broken Link
- http://www.securityfocus.com/bid/9836 Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15409 VDB Entry