Python XMLRPC Client Library Denial of Service Vulnerability

Bugtraq ID:	66958
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-1753
Remote:	Yes
Local:	No
Published:	Dec 23 2013 12:00AM
Updated:	Jul 06 2016 02:08PM
Credit:	Michael Gilbert
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Oracle Linux 0
Not Vulnerable:

Python XMLRPC Client Library Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva lib64python-devel-2.7.3-4.6.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64python2.7-2.7.3-4.6.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-2.7.3-4.6.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-docs-2.7.3-4.6.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-2.7.3-4.6.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-apps-2.7.3-4.6.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Python XMLRPC Client Library Denial of Service Vulnerability

References:

• Python Homepage (Python Software Foundation)
  
• isg3T1023439: Multiple vulnerabilities in Python affect PowerKVM (IBM)
  
• Oracle Linux Bulletin - January 2016 (Oracle)
  
• python: gzip bomb and unbound read DoS flaw in python XMLRPC library (Red Hat Bugzilla)
  
• Ref: linuxbulletinoct2015-2719645 Oracle Linux Bulletin - October 2015 Revision (Oracle)
  
• RHSA-2015:1064-1 (RedHat)