Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Python < 2.6.8, 2.7.x < 2.7.3, 3.1.x < 3.1.5, 3.2.x < 3.2.3 Hash DoS (bpo-13703) - Linux
Information
Severity
Severity
Medium
Family
Family
Denial of Service
CVSSv2 Base
CVSSv2 Base
5.0
CVSSv2 Vector
CVSSv2 Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Solution Type
Solution Type
Vendor Patch
Created
Created
1 year ago
Modified
Modified
1 year ago
Summary
Python is prone to a denial of service (DoS) vulnerability.
Insight
Insight
Python computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a DoS (CPU consumption) via crafted input to an application that maintains a hash table.
Affected Software
Affected Software
Python prior to version 2.6.8, versions 2.7.x prior to 2.7.3, 3.1.x < 3.1.5 and 3.2.x prior to 3.2.3.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
Update to version 2.6.8, 2.7.3, 3.1.5, 3.2.3 or later.