fkie_nvd - fkie_cve-2013-7338

FKIE_CVE-2013-7338

Vulnerability from fkie_nvd - Published: 2014-04-22 14:23 - Updated: 2025-04-12 10:46

Severity ?

Summary

Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.

References

URL	Tags
cve@mitre.org	http://bugs.python.org/issue20078	Exploit, Patch, Vendor Advisory
cve@mitre.org	http://hg.python.org/cpython/rev/79ea4ce431b1	Exploit, Patch, Vendor Advisory
cve@mitre.org	http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html	Mailing List
cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html	Mailing List, Third Party Advisory
cve@mitre.org	http://seclists.org/oss-sec/2014/q1/592	Mailing List, Third Party Advisory
cve@mitre.org	http://seclists.org/oss-sec/2014/q1/595	Mailing List, Third Party Advisory
cve@mitre.org	http://www.securityfocus.com/bid/65179	Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securitytracker.com/id/1029973	Third Party Advisory, VDB Entry
cve@mitre.org	https://docs.python.org/3.3/whatsnew/changelog.html	Vendor Advisory
cve@mitre.org	https://security.gentoo.org/glsa/201503-10	Third Party Advisory
cve@mitre.org	https://support.apple.com/kb/HT205031	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://bugs.python.org/issue20078	Exploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://hg.python.org/cpython/rev/79ea4ce431b1	Exploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/oss-sec/2014/q1/592	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/oss-sec/2014/q1/595	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/65179	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1029973	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://docs.python.org/3.3/whatsnew/changelog.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201503-10	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT205031	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.0
python	python	3.3.1
python	python	3.3.1
python	python	3.3.2
python	python	3.3.3
python	python	3.3.3
python	python	3.3.3
apple	mac_os_x	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "A8F5D6EE-7E52-4E82-AFA3-056E2CCA6A95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:alpha1:*:*:*:*:*:*",
              "matchCriteriaId": "F699D1AE-6297-4F3E-B276-7DC246CAACA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:alpha2:*:*:*:*:*:*",
              "matchCriteriaId": "19C43276-7B2C-4E74-BB71-671934F5BB64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:alpha3:*:*:*:*:*:*",
              "matchCriteriaId": "873A7118-EEFD-49CC-B778-6E91942C6FC2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:alpha4:*:*:*:*:*:*",
              "matchCriteriaId": "F96A8F58-C28D-4EB2-A3D5-276D17E8E0DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "2ACF1669-4D46-4D44-972C-A2D5E5D51069",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:beta2:*:*:*:*:*:*",
              "matchCriteriaId": "B7FF3E0E-3D41-47D0-AE18-ADB2EC2942BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "F358C4D2-7A49-4092-BB17-9423E5381F44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "D17DA663-B755-4D41-A151-347036187E92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "A837C0BC-C3C8-47B8-8BEA-8F01F4B1A35B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.1:-:*:*:*:*:*:*",
              "matchCriteriaId": "3FC85C4C-B721-4BD9-BFFD-DCEC32A77FB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "0D553F40-92C2-4537-AF74-5F9307E20AE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "121225D0-C5DA-4F26-93B8-3D56BC1D38B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "52DD66F7-FE7B-4C1C-B07B-F9E4CEEA7AFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.3:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "5D540913-0EEF-413B-8AFD-82E858844FD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:python:python:3.3.3:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "BFD75566-C783-4B16-9FF1-4AC2670310F2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7883E465-932D-4C11-AA54-97E44181F906",
              "versionEndIncluding": "10.10.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function."
    },
    {
      "lang": "es",
      "value": "Python anterior a 3.3.4 RC1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (bucle infinito y consumo de CPU) a trav\u00e9s de un valor de tama\u00f1o de archivo m\u00e1s grande que el tama\u00f1o del archivo zip hacia la funci\u00f3n (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract o (5) ZipFile.extractall."
    }
  ],
  "id": "CVE-2013-7338",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-04-22T14:23:34.893",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://bugs.python.org/issue20078"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://hg.python.org/cpython/rev/79ea4ce431b1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2014/q1/592"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2014/q1/595"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/65179"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1029973"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://docs.python.org/3.3/whatsnew/changelog.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201503-10"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT205031"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://bugs.python.org/issue20078"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://hg.python.org/cpython/rev/79ea4ce431b1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2014/q1/592"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/oss-sec/2014/q1/595"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/65179"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1029973"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://docs.python.org/3.3/whatsnew/changelog.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201503-10"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT205031"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2013-7338 (GCVE-0-2013-7338)

Vulnerability from cvelistv5 – Published: 2014-04-22 14:00 – Updated: 2024-08-06 18:01

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://seclists.org/oss-sec/2014/q1/592	mailing-listx_refsource_MLIST
	http://www.securityfocus.com/bid/65179	vdb-entryx_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
	http://hg.python.org/cpython/rev/79ea4ce431b1	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201503-10	vendor-advisoryx_refsource_GENTOO
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://bugs.python.org/issue20078	x_refsource_CONFIRM
	http://seclists.org/oss-sec/2014/q1/595	mailing-listx_refsource_MLIST
	https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1029973	vdb-entryx_refsource_SECTRACK
	https://docs.python.org/3.3/whatsnew/changelog.html	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:01:20.402Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20140318 CVE request for python/zipfile",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q1/592"
          },
          {
            "name": "65179",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65179"
          },
          {
            "name": "openSUSE-SU-2014:0597",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.python.org/cpython/rev/79ea4ce431b1"
          },
          {
            "name": "GLSA-201503-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201503-10"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.python.org/issue20078"
          },
          {
            "name": "[oss-security] 20140319 Re: CVE request for python/zipfile",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q1/595"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "1029973",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029973"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://docs.python.org/3.3/whatsnew/changelog.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20140318 CVE request for python/zipfile",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q1/592"
        },
        {
          "name": "65179",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65179"
        },
        {
          "name": "openSUSE-SU-2014:0597",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.python.org/cpython/rev/79ea4ce431b1"
        },
        {
          "name": "GLSA-201503-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201503-10"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.python.org/issue20078"
        },
        {
          "name": "[oss-security] 20140319 Re: CVE request for python/zipfile",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q1/595"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "1029973",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029973"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://docs.python.org/3.3/whatsnew/changelog.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2013-7338",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20140318 CVE request for python/zipfile",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q1/592"
            },
            {
              "name": "65179",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65179"
            },
            {
              "name": "openSUSE-SU-2014:0597",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html"
            },
            {
              "name": "http://hg.python.org/cpython/rev/79ea4ce431b1",
              "refsource": "CONFIRM",
              "url": "http://hg.python.org/cpython/rev/79ea4ce431b1"
            },
            {
              "name": "GLSA-201503-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201503-10"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "http://bugs.python.org/issue20078",
              "refsource": "CONFIRM",
              "url": "http://bugs.python.org/issue20078"
            },
            {
              "name": "[oss-security] 20140319 Re: CVE request for python/zipfile",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q1/595"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "1029973",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029973"
            },
            {
              "name": "https://docs.python.org/3.3/whatsnew/changelog.html",
              "refsource": "CONFIRM",
              "url": "https://docs.python.org/3.3/whatsnew/changelog.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2013-7338",
    "datePublished": "2014-04-22T14:00:00",
    "dateReserved": "2014-03-18T00:00:00",
    "dateUpdated": "2024-08-06T18:01:20.402Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2013-7338

CVE-2013-7338 (GCVE-0-2013-7338)

Tags

Sightings

Nomenclature