CVE-2008-2315

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

• CWE-190

• http://bugs.gentoo.org/attachment.cgi?id=159418&action=viewExploit
• http://bugs.gentoo.org/show_bug.cgi?id=230640Third Party Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/31305Broken Link
• http://secunia.com/advisories/31332Broken Link
• http://secunia.com/advisories/31358Broken Link
• http://secunia.com/advisories/31365Broken Link
• http://secunia.com/advisories/31518Broken Link
• http://secunia.com/advisories/31687Broken Link
• http://secunia.com/advisories/32793Broken Link
• http://secunia.com/advisories/33937Broken Link
• http://secunia.com/advisories/37471Broken Link
• http://secunia.com/advisories/38675Broken Link
• http://security.gentoo.org/glsa/glsa-200807-16.xmlThird Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
• http://support.apple.com/kb/HT3438Third Party Advisory
• http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
• http://www.debian.org/security/2008/dsa-1667Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:163Broken Link, Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:164Broken Link, Third Party Advisory
• http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900Third Party Advisory
• http://www.openwall.com/lists/oss-security/2008/11/05/2Mailing List
• http://www.openwall.com/lists/oss-security/2008/11/05/3Mailing List
• http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30491Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-632-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2008/2288Broken Link, Third Party Advisory
• http://www.vupen.com/english/advisories/2009/3316Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44172VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44173VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761Broken Link
• http://bugs.gentoo.org/attachment.cgi?id=159418&action=viewExploit
• http://bugs.gentoo.org/show_bug.cgi?id=230640Third Party Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlMailing List
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.htmlThird Party Advisory
• http://secunia.com/advisories/31305Broken Link
• http://secunia.com/advisories/31332Broken Link
• http://secunia.com/advisories/31358Broken Link
• http://secunia.com/advisories/31365Broken Link
• http://secunia.com/advisories/31518Broken Link
• http://secunia.com/advisories/31687Broken Link
• http://secunia.com/advisories/32793Broken Link
• http://secunia.com/advisories/33937Broken Link
• http://secunia.com/advisories/37471Broken Link
• http://secunia.com/advisories/38675Broken Link
• http://security.gentoo.org/glsa/glsa-200807-16.xmlThird Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289Third Party Advisory
• http://support.apple.com/kb/HT3438Third Party Advisory
• http://support.avaya.com/css/P8/documents/100074697Third Party Advisory
• http://www.debian.org/security/2008/dsa-1667Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:163Broken Link, Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:164Broken Link, Third Party Advisory
• http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900Third Party Advisory
• http://www.openwall.com/lists/oss-security/2008/11/05/2Mailing List
• http://www.openwall.com/lists/oss-security/2008/11/05/3Mailing List
• http://www.securityfocus.com/archive/1/507985/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30491Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-632-1Third Party Advisory
• http://www.vmware.com/security/advisories/VMSA-2009-0016.htmlThird Party Advisory
• http://www.vupen.com/english/advisories/2008/2288Broken Link, Third Party Advisory
• http://www.vupen.com/english/advisories/2009/3316Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44172VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44173VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761Broken Link

Published

Aug 1, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2309Incomplete blacklist vulnerability in CoreTypes in Apple Mac…
• CVE-2008-2310Format string vulnerability in c++filt in Apple Mac OS X 10.…
• CVE-2008-2311Launch Services in Apple Mac OS X before 10.5, when Open Saf…
• CVE-2008-2312Network Preferences in Apple Mac OS X 10.4.11 stores PPP pas…
• CVE-2008-2313Apple Mac OS X before 10.5 uses weak permissions for the Use…
• CVE-2008-2314Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot c…
• CVE-2008-2316Integer overflow in _hashopenssl.c in the hashlib module in …
• CVE-2008-2317WebCore in Apple Safari does not properly perform garbage co…
• CVE-2008-2318The WOHyperlink implementation in WebObjects in Apple Xcode …
• CVE-2008-2320Stack-based buffer overflow in CarbonCore in Apple Mac OS X …
• CVE-2008-2321Unspecified vulnerability in CoreGraphics in Apple Mac OS X …
• CVE-2008-2322Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, …