A vulnerability has been discovered in Python, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to the "SimpleXMLRPCRequestHandler.do_POST()" method not properly handling an EOF when processing POST requests. This can be exploited to cause high CPU consumption via a specially crafted HTTP POST request.

The vulnerability is confirmed in version 2.7.2 and also reported in version 3.2.2. Other versions may also be affected.

Solution
Restrict access to trusted hosts only.

Provided and/or discovered by
Dan Callaghan in a Red Hat bug report.

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=789790
http://bugs.python.org/issue14001

Deep Links
Links available in Customer Area