Lucene search
HistoryMay 19, 2014 - 2:55 p.m.
CVE-2013-7040
cve
2013
7040
python
2.7
3.4
hash collisions
denial of service
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.2 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.6%
Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.
Affected configurations
Node
applemac_os_xRangeβ€10.10.4
Node
pythonpythonMatch2.7.1
ORpythonpythonMatch2.7.1rc1
ORpythonpythonMatch2.7.2rc1
ORpythonpythonMatch2.7.3
ORpythonpythonMatch2.7.4
ORpythonpythonMatch2.7.5
ORpythonpythonMatch2.7.6
ORpythonpythonMatch2.7.7
ORpythonpythonMatch2.7.1150
ORpythonpythonMatch2.7.2150
ORpythonpythonMatch3.0
ORpythonpythonMatch3.0.1
ORpythonpythonMatch3.1
ORpythonpythonMatch3.1.1
ORpythonpythonMatch3.1.2
ORpythonpythonMatch3.1.3
ORpythonpythonMatch3.1.4
ORpythonpythonMatch3.1.5
ORpythonpythonMatch3.2
ORpythonpythonMatch3.2alpha
ORpythonpythonMatch3.2.0
ORpythonpythonMatch3.2.1
ORpythonpythonMatch3.2.2
ORpythonpythonMatch3.2.3
ORpythonpythonMatch3.2.4
ORpythonpythonMatch3.2.5
ORpythonpythonMatch3.2.2150
ORpythonpythonMatch3.3
ORpythonpythonMatch3.3beta2
ORpythonpythonMatch3.3.0
ORpythonpythonMatch3.3.1
ORpythonpythonMatch3.3.1rc1
ORpythonpythonMatch3.3.2
ORpythonpythonMatch3.3.3
ORpythonpythonMatch3.3.3rc1
ORpythonpythonMatch3.3.3rc2
ORpythonpythonMatch3.3.4
ORpythonpythonMatch3.3.4rc1
ORpythonpythonMatch3.3.5-
ORpythonpythonMatch3.3.5rc1
ORpythonpythonMatch3.3.5rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | le | 10.10.4 |
Related
prion
prion
Code injection
2014-05-19 14:55:00
Code injection
2012-10-05 21:55:00
cvelist
cvelist
CVE-2013-7040
2014-05-19 14:00:00
CVE-2012-1150
2012-10-05 21:00:00
debiancve
debiancve
CVE-2013-7040
2014-05-19 14:55:09
CVE-2012-1150
2012-10-05 21:55:01
ubuntucve
ubuntucve
CVE-2013-7040
2014-05-19 00:00:00
CVE-2012-1150
2012-03-09 00:00:00
nvd
nvd
CVE-2013-7040
2014-05-19 14:55:09
CVE-2012-1150
2012-10-05 21:55:01
openvas
openvas
Python 2.7 < 3.4 DoS Vulnerability (bpo-14621) - Linux
2021-11-02 00:00:00
Python 'Hash Collision' Denial of Service Vulnerability - Mac OS X
2014-06-09 00:00:00
Python 'Hash Collision' Denial of Service Vulnerability - Windows
2014-06-09 00:00:00
kaspersky
kaspersky
KLA10301 DoS vulnerability in Python
2014-05-19 00:00:00
seebug
seebug
PythonεεΈε²ηͺζη»ζε‘ζΌζ΄(CVE-2012-1150)
2012-10-10 00:00:00
cve
cve
CVE-2012-1150
2012-10-05 21:55:01
nessus
nessus
SuSE 10 Security Update : apache2-mod_python (ZYPP Patch Number 8127)
2012-08-14 00:00:00
SuSE 11.1 Security Update : apache2-mod_python (SAT Patch Number 6247)
2013-01-25 00:00:00
Oracle Linux 5 : python (ELSA-2012-0745)
2013-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: python-docs-2.7.3-1.fc17
2012-05-02 04:50:10
[SECURITY] Fedora 16 Update: python-docs-2.7.3-1.fc16
2012-05-06 01:26:43
[SECURITY] Fedora 16 Update: python3-3.2.3-2.fc16
2012-06-19 14:53:34
redhat
redhat
(RHSA-2012:0745) Moderate: python security update
2012-06-18 00:00:00
(RHSA-2012:0744) Moderate: python security update
2012-06-18 00:00:00
centos
centos
python, tkinter security update
2012-06-18 13:11:45
python, tkinter security update
2012-06-18 16:35:36
ubuntu
ubuntu
Python 3.2 vulnerabilities
2012-10-23 00:00:00
Python 2.7 vulnerabilities
2012-10-02 00:00:00
Python 3.1 vulnerabilities
2012-10-24 00:00:00
oraclelinux
oraclelinux
python security update
2012-06-18 00:00:00
python security update
2012-06-18 00:00:00
amazon
amazon
Low: python26
2012-07-05 16:16:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:41:53
Information Disclosure
2019-05-02 04:41:53
f5
f5
securityvulns
securityvulns
python multiple security vulnerabilities
2012-07-29 00:00:00
[ MDVSA-2012:096-1 ] python
2012-07-09 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
osv
osv
python2.6 - security update
2014-07-31 00:00:00
debian
debian
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
gentoo
gentoo
Python: Multiple vulnerabilities
2014-01-06 00:00:00
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40
ibm
ibm
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.2 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.6%
Related for CVE-2013-7040