CVE-2012-2135: Medium severity python 2.7 vulnerability
Last updated 24 July 2024
Other sources
The utf-16 decoder in Python 3.1 through 3.3 does not update the alignedend variable after calling the unicodedecodecallerrorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2135?
The severity of CVE-2012-2135 is medium.
Which software versions are affected by CVE-2012-2135?
Python versions 3.1 through 3.3 are affected, as well as certain versions of Ubuntu Linux and Debian Linux.
How can remote attackers exploit CVE-2012-2135?
Remote attackers can exploit CVE-2012-2135 to obtain sensitive information or cause a denial of service through memory corruption and crash.
Is there a fix available for CVE-2012-2135?
Yes, there are fixes available for CVE-2012-2135. It is recommended to update to the latest patched version of Python 3 or apply the security updates provided by Ubuntu Linux and Debian Linux.
Where can I find more information about CVE-2012-2135?
More information about CVE-2012-2135 can be found on the Debian Bug Tracker, Python Bug Tracker, and Secunia advisory websites.