Servers and applications
CVE-2008-2315
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
- Severity
- High 7.5
- Published
- 1 Aug 2008
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Exploit chance
- 4.4% in the next 30 daysHigher than 91% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- Integer overflow (CWE-190)
- Attack
- Over the network · No login needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PythonServers and applications · cpe:a:python:python |
|