CVE-2012-0845: Python

Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days.

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Affected products

• Python Python: up to and including 2.6.7; version 0.9.0 only; version 0.9.1 only; version 1.2 only; version 1.3 only; version 1.5.2 only; …

Published 2012-10-05. Last modified 2026-06-16.