PSF-2019-1

vendorUSosv

smtplib unlimited read

view advisory published 2019-06-03Licence: per source

The smtplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious SMTP server can trick the smtplib module to consume large amounts of memory.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2013-1752US	—	—	—	2019-06-03
Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long stri…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/security/cve/cve-2013-1752ADVISORY
https://bugs.python.org/issue16038REPORT
https://bugs.python.org/issue16039REPORT
https://bugs.python.org/issue16040REPORT
https://bugs.python.org/issue16041REPORT
https://bugs.python.org/issue16042REPORT
https://bugs.python.org/issue6791REPORT

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan