Description

Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data.

Remediation

References

CVE-2018-20406

Related Vulnerabilities

WordPress Plugin Relevanssi-A Better Search SQL Injection (3.2)

MySQL CVE-2017-3460 Vulnerability (CVE-2017-3460)

MySQL CVE-2023-21881 Vulnerability (CVE-2023-21881)

WordPress Plugin SendPress Newsletters Multiple Vulnerabilities (1.1.7.21)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-7986)

Severity

High

Classification

CVE-2018-20406 CWE-190 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities