NVD

Id
2237  
Name
CVE-2008-2316  
Description
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-01  
Modified Date
2011-03-07  
Seq
2008-2316  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14225 2237 CVE-2008-2316 http://bugs.gentoo.org/attachment.cgi?id=159422&action=view  View
14226 2237 CVE-2008-2316 http://bugs.gentoo.org/show_bug.cgi?id=230640  View
14227 2237 CVE-2008-2316 APPLE-SA-2009-02-12  View
14228 2237 CVE-2008-2316 SUSE-SR:2008:017  View
14229 2237 CVE-2008-2316 GLSA-200807-16  View
14230 2237 CVE-2008-2316 SSA:2008-217-01  View
14231 2237 CVE-2008-2316 http://support.apple.com/kb/HT3438  View
14232 2237 CVE-2008-2316 http://wiki.rpath.com/Advisories:rPSA-2008-0243  View
14233 2237 CVE-2008-2316 MDVSA-2008:163  View
14234 2237 CVE-2008-2316 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900  View
14235 2237 CVE-2008-2316 20080813 rPSA-2008-0243-1 idle python  View
14236 2237 CVE-2008-2316 30491  View
14237 2237 CVE-2008-2316 USN-632-1  View
14238 2237 CVE-2008-2316 ADV-2008-2288  View
14239 2237 CVE-2008-2316 python-multiple-bo(44173)  View
14240 2237 CVE-2008-2316 python-hashlib-overflow(44174)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46985 JVNDB-2008-002295 Python の hashlib モジュール における整数オーバーフローの脆弱性 Python の hashlib モジュール の _hashopenssl.c には、暗号ダイジェストの処理に関して整数オーバーフローの脆弱性が存在します。 CVE-2008-2316 32429 CVE-2008-2316 2237 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002295.html 2008-08-01 2009-03-17 View