zipimporter overflow¶
Warning
This resource is maintained for historical reference and does not contain the latest vulnerability info for Python.
The canonical database for vulnerabilities affecting Python is available on GitHub in the Open Source Vulnerability (OSV) format. This vulnerability can be viewed online at the Open Source Vulnerability Database.
Heap overflow in zipimporter module.
Dates:
Disclosure date: 2016-01-21 (Python issue bpo-26171 reported)
Fixed In¶
Python 2.7.12 (2016-06-25) fixed by commit 64ea192 (branch 2.7) (2016-01-21)
Python 3.3.7 (2017-09-19) fixed by commit d751040 (branch 3.3) (2016-09-14)
Python 3.4.5 (2016-06-25) fixed by commit c4032da (branch 3.4) (2016-01-21)
Python 3.5.2 (2016-06-25) fixed by commit c4032da (branch 3.4) (2016-01-21)
Python 3.6.0 (2016-12-22) fixed by commit d751040 (branch 3.3) (2016-09-14)
Python issue¶
heap overflow in zipimporter module.
Python issue: bpo-26171
Creation date: 2016-01-21
Reporter: Insu Yun
CVE-2016-5636¶
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
CVE ID: CVE-2016-5636
Published: 2016-09-02
CVSS Score: 10.0
Timeline¶
Timeline using the disclosure date 2016-01-21 as reference:
2016-01-21: Python issue bpo-26171 reported by Insu Yun
2016-01-21: commit 64ea192 (branch 2.7)
2016-01-21: commit c4032da (branch 3.4)
2016-06-25 (+156 days): Python 2.7.12 released
2016-06-25 (+156 days): Python 3.4.5 released
2016-06-25 (+156 days): Python 3.5.2 released
2016-09-02 (+225 days): CVE-2016-5636 published
2016-09-14 (+237 days): commit d751040 (branch 3.3)
2016-12-22: Python 3.6.0 released
2017-09-19 (+607 days): Python 3.3.7 released