CVE-2004-0150: Buffer Overflow
Published Apr 15, 2004
·Updated
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
Affected Software
3 affected components
Python Software Foundation Python=2.2
Python Software Foundation Python=2.2.1
Python Python>=2.2.0<2.2.2
Remediation
Patch Available
Patch Available
Event History
Apr 15, 2004
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0150?
CVE-2004-0150 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2004-0150?
To fix CVE-2004-0150, upgrade Python to version 2.2.2 or later.
3
What versions of Python are affected by CVE-2004-0150?
CVE-2004-0150 affects Python versions 2.2.0, 2.2.1, and earlier.
4
How can CVE-2004-0150 be exploited by attackers?
Attackers can exploit CVE-2004-0150 by sending a crafted IPv6 address through DNS, leading to a buffer overflow.
5
Is IPv6 support relevant to the vulnerability in CVE-2004-0150?
Yes, the vulnerability occurs when IPv6 support is disabled in the affected versions of Python.