CVE-2013-7338: Input Validation
Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7338?
CVE-2013-7338 has a medium severity rating due to its potential to cause denial of service through CPU consumption.
How do I fix CVE-2013-7338?
To fix CVE-2013-7338, upgrade Python to version 3.3.4 or later.
Which Python versions are affected by CVE-2013-7338?
CVE-2013-7338 affects Python versions 3.3.0 through 3.3.3.
What type of attack does CVE-2013-7338 facilitate?
CVE-2013-7338 facilitates denial of service attacks by allowing remote attackers to induce an infinite loop.
Is CVE-2013-7338 specific to any operating system?
CVE-2013-7338 is not specific to any operating system but affects multiple versions of Python across platforms.