Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of…

Description

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

Scores

EPSS (exploitation in 30 days)

5.5% · top 7.2% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (39)

• 22303 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1197 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 22487 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20061011 rPSA-2006-0187-1 idle python (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 22639 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2006:181 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• python-repr-bo(29408) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 23680 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 22512 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-229.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 31492 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2008:0629 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2006:0713 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• ADV-2006-5131 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 1017019 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 22357 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1198 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 22379 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-359-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 22448 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SR:2006:025 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 20376 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162 (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-200610-07 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• ADV-2006-3940 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• https://issues.rpath.com/browse/RPL-702 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20070110 VMware ESX server security updates (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 22358 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 22297 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10789 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 22531 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 22276 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-4980](https://trackcve.app/badge/CVE-2006-4980.svg)](https://trackcve.app/cve/CVE-2006-4980)

Record last updated 7 Aug 2024, 19:32 UTC.