CVE-2013-1752

mediumrejectedpriority · track · 0DEUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

no CVSS · medium

Is it mine?

12 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · osv

Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions

cvss

Technical severity, 0–10. One row per scoring source.

mediuma sovereign source's own severity rating (no CVSS score)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USLLM-inferred

affected products (12)

Products and version ranges known to be affected.

Debian Linux Wheezy (7.0)all versionscert_bundDEcpe:/o:debian:debian_linux:7.0
F5 BIG-IPall versionscert_bundDEcpe:/a:f5:big-ip:-
F5 Enterprise Managerall versionscert_bundDEcpe:/a:f5:enterprise_manager:-
F5 Policy Enforcement Managerall versionscert_bundDEcpe:/a:f5:big-ip_policy_enforcement_manager:-
F5 WebAcceleratorall versionscert_bundDEcpe:/h:f5:big-ip_webaccelerator:-
Open Source Pythonall versionscert_bundDEcpe:/a:python:python:-
Red Hat Enterprise Linux 6all versionscert_bundDEcpe:/o:redhat:enterprise_linux:6
Red Hat Enterprise Linux 7all versionscert_bundDEcpe:/o:redhat:enterprise_linux:7
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE Linux Enterprise Desktopall versionscert_bundDEcpe:/o:suse:linux_enterprise_desktop:-
SUSE Linux Enterprise Serverall versionscert_bundDEcpe:/o:suse:linux_enterprise_server:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-

advisories (2)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-2521Python: Mehrere SchwachstellenDeutsch2015-06-04csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code zur Ausführung zu bringen.
PSF-2019-1smtplib unlimited read2019-06-03vendor · osvUS
The smtplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious SMTP server can trick the smtplib module to consume large amounts of memory.

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund osv NVD CVE.org MITRE

published 2019-06-03modified 2023-11-07

references (5) cnnvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan