CVE-2013-1753: High severity python 2.7 vulnerability
Published Mar 11, 2020
·Updated
The gzipdecode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
Affected Software
4 affected components
Python Python>=2.7.0<2.7.9
Python Python>=3.2.0<3.2.6
Python Python>=3.3.0<3.3.6
Python Python>=3.4.0<3.4.3
Remediation
Patch Available
Event History
Mar 11, 2020
CVE Published
via MITRE·04:46 PM
Data Sourced
via MITRE·04:46 PM
Description
Frequently Asked Questions
1
What is CVE-2013-1753?
CVE-2013-1753 is a vulnerability in the gzip_decode function in the xmlrpc client library in Python 3.4 and earlier.
2
How does CVE-2013-1753 impact Python?
CVE-2013-1753 allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
3
Which versions of Python are affected by CVE-2013-1753?
Python versions 2.7.0 to 2.7.9, 3.2.0 to 3.2.6, 3.3.0 to 3.3.6, and 3.4.0 to 3.4.3 are affected by CVE-2013-1753.
4
What is the severity of CVE-2013-1753?
CVE-2013-1753 has a severity rating of 7.5 (high).
5
How can I fix CVE-2013-1753?
It is recommended to upgrade to a patched version of Python that addresses this vulnerability.