4.3

CVE-2013-7040

Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS X Version <= 10.10.4
Python ≫ Python Version2.7.1
Python ≫ Python Version2.7.1 Updaterc1
Python ≫ Python Version2.7.2 Updaterc1
Python ≫ Python Version2.7.3
Python ≫ Python Version2.7.4
Python ≫ Python Version2.7.5
Python ≫ Python Version2.7.6
Python ≫ Python Version2.7.7
Python ≫ Python Version2.7.1150
Python ≫ Python Version2.7.2150
Python ≫ Python Version3.0
Python ≫ Python Version3.0.1
Python ≫ Python Version3.1
Python ≫ Python Version3.1.1
Python ≫ Python Version3.1.2
Python ≫ Python Version3.1.3
Python ≫ Python Version3.1.4
Python ≫ Python Version3.1.5
Python ≫ Python Version3.2
Python ≫ Python Version3.2 Updatealpha
Python ≫ Python Version3.2.0
Python ≫ Python Version3.2.1
Python ≫ Python Version3.2.2
Python ≫ Python Version3.2.3
Python ≫ Python Version3.2.4
Python ≫ Python Version3.2.5
Python ≫ Python Version3.2.2150
Python ≫ Python Version3.3
Python ≫ Python Version3.3 Updatebeta2
Python ≫ Python Version3.3.0
Python ≫ Python Version3.3.1
Python ≫ Python Version3.3.1 Updaterc1
Python ≫ Python Version3.3.2
Python ≫ Python Version3.3.3
Python ≫ Python Version3.3.3 Updaterc1
Python ≫ Python Version3.3.3 Updaterc2
Python ≫ Python Version3.3.4
Python ≫ Python Version3.3.4 Updaterc1
Python ≫ Python Version3.3.5 Update-
Python ≫ Python Version3.3.5 Updaterc1
Python ≫ Python Version3.3.5 Updaterc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.56% 0.673
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P