Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Gentoo: 200409-03 High Severity: Python 2.2 DNS Buffer Overflow

gentoo
Calendar Grey September 2, 2004
Scroller Gentoo
Python 2.2 exhibits a security risk due to a buffer overflow issue related to DNS processing, particularly when IPV6 support is turned off. It is advisable for all users to upgrade.
Python 2.2 has a vulnerability in DNS handling when IPV6 is disabled and a malformed IPV6 address is encountered by getaddrinfo().

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200409-03
                                            https://security.gentoo.org/

  Severity: High
     Title: Python 2.2: Buffer overflow in getaddrinfo()
      Date: September 02, 2004
      Bugs: #62440
        ID: 200409-03


Synopsis
=======
Python 2.2 has a vulnerability in DNS handling when IPV6 is disabled
and a malformed IPV6 address is encountered by getaddrinfo().

Background
=========
Python is an interpreted, interactive, object-oriented, cross-platform
programming language.

Affected packages
================
    -------------------------------------------------------------------
     Package          /  Vulnerable  /                      Unaffected
    -------------------------------------------------------------------
  1  dev-lang/python       < 2.2.2                            >= 2.2.2
                                                                 < 2.2

...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow python dns issue

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo buffer overflow python dns issue

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround