Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Moderate

It was discovered that multiple Python standard library modules implementing network protocols (such as httplib or smtplib) failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of memory.

CWE-400 - Uncontrolled Resource Consumption

It was discovered that the Python xmlrpclib did not restrict the size of a gzip compressed HTTP responses. A malicious XMLRPC server could cause an XMLRPC client using xmlrpclib to consume an excessive amount of memory.

CWE-400 - Uncontrolled Resource Consumption

It was discovered that the socket.recvfrom_into() function failed to check the size of the supplied buffer. This could lead to a buffer overflow when the function was called with an insufficiently sized buffer.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A flaw was found in the way the json module handled negative index argument passed to certain functions (such as raw_decode()). An attacker able to control index value passed to one of the affected functions could possibly use this flaw to disclose portions of the application memory.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

It was discovered that the CGIHTTPServer module incorrectly handled URL encoded paths. A remote attacker could use this flaw to execute scripts outside of the cgi-bin directory, or disclose source of scripts in the cgi-bin directory.

CWE-138 - Improper Neutralization of Special Elements

An integer overflow flaw was found in the way the buffer() function handled its offset and size arguments. An attacker able to control those arguments could use this flaw to disclose portions of the application memory or cause it to crash.

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor