Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-7338

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.

  • Published: Apr 22, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-7338
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:M/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
python / python 3.3.3-rc2 3.3.3-rc2.x
python / python 3.3.2 3.3.2.x
python / python 3.3.1-rc1 3.3.1-rc1.x
python / python 3.3.3-rc1 3.3.3-rc1.x
python / python 3.3.3 3.3.3.x
python / python 3.3.0 3.3.0.x
python / python 3.3.0-alpha1 3.3.0-alpha1.x
python / python 3.3.0-alpha2 3.3.0-alpha2.x
python / python 3.3.0-alpha3 3.3.0-alpha3.x
python / python 3.3.0-alpha4 3.3.0-alpha4.x
python / python 3.3.0-beta1 3.3.0-beta1.x
python / python 3.3.0-beta2 3.3.0-beta2.x
python / python 3.3.0-rc1 3.3.0-rc1.x
python / python 3.3.0-rc2 3.3.0-rc2.x
python / python 3.3.0-rc3 3.3.0-rc3.x
python / python 3.3.1 3.3.1.x
apple / mac_os_x - 10.10.4.x