Description
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1977-1 | New python packages fix several vulnerabilities |
EUVD |
EUVD-2008-2312 | Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB." |
Ubuntu USN |
USN-632-1 | Python vulnerabilities |
References
History
Wed, 28 May 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Thu, 22 May 2025 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T08:58:02.058Z
Reserved: 2008-05-18T00:00:00.000Z
Link: CVE-2008-2316
No data.
Status : Deferred
Published: 2008-08-01T14:41:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2008-2316
OpenCVE Enrichment
No data.
Debian DSA
EUVD
Ubuntu USN