Skip to content

Buffer overflow vulnerability in os.symlink on Windows (CVE-2018-1000117) #77182

@zooba

Description

@zooba
BPO 33001
Nosy @pfmoore, @vstinner, @larryhastings, @tjguk, @ned-deily, @zware, @eryksun, @zooba, @izbyshev, @miss-islington
PRs
  • bpo-33001: Minimal fix to prevent buffer overrun in os.symlink #5989
  • [3.6] bpo-33001: Minimal fix to prevent buffer overrun in os.symlink (GH-5989) #5990
  • [3.5] bpo-33001: Prevent buffer overrun in os.symlink (GH-5989) #5991
  • [3.4] bpo-33001: Prevent buffer overrun in os.symlink (GH-5989) #5992
  • [3.7] bpo-33001: Prevent buffer overrun in os.symlink (GH-5989) #5996
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/zooba'
    closed_at = <Date 2018-05-28.23:25:42.844>
    created_at = <Date 2018-03-05.18:04:42.615>
    labels = ['type-security', '3.7', '3.8', 'OS-windows']
    title = 'Buffer overflow vulnerability in os.symlink on Windows (CVE-2018-1000117)'
    updated_at = <Date 2019-05-10.18:06:59.274>
    user = 'https://github.com/zooba'

    bugs.python.org fields:

    activity = <Date 2019-05-10.18:06:59.274>
    actor = 'ned.deily'
    assignee = 'steve.dower'
    closed = True
    closed_date = <Date 2018-05-28.23:25:42.844>
    closer = 'steve.dower'
    components = ['Windows']
    creation = <Date 2018-03-05.18:04:42.615>
    creator = 'steve.dower'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 33001
    keywords = ['patch', 'security_issue']
    message_count = 14.0
    messages = ['313275', '313279', '313281', '313282', '313291', '313292', '313293', '313298', '313368', '313398', '313415', '316539', '316543', '317958']
    nosy_count = 10.0
    nosy_names = ['paul.moore', 'vstinner', 'larry', 'tim.golden', 'ned.deily', 'zach.ware', 'eryksun', 'steve.dower', 'izbyshev', 'miss-islington']
    pr_nums = ['5989', '5990', '5991', '5992', '5996']
    priority = 'critical'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue33001'
    versions = ['Python 3.4', 'Python 3.5', 'Python 3.6', 'Python 3.7', 'Python 3.8']

    Metadata

    Metadata

    Assignees

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions