Skip to content
Fencer Intel
critical 9.8

CVE-2016-5636 in the critical feed json

Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 al…

published 2016-09-02 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6580

cvss
9.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
25.5%
EPSS 25.5% chance of exploitation in 30 days, percentile 97%
public exploits
0
none known

Summary

Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.

Patch / fix

  • python2.7 Debian 11 2.7.12~rc1-1

debian advisories DEBIAN-CVE-2016-5636

  • python2.7 Ubuntu 14.04 LTS 2.7.6-8ubuntu0.3
  • python2.7 Ubuntu 16.04 LTS 2.7.12-1ubuntu0~16.04.1
  • python3.4 Ubuntu 14.04 LTS 3.4.3-1ubuntu1~14.04.5
  • python3.5 Ubuntu 14.04 LTS 3.5.2-2ubuntu0~16.04.4~14.04.1
  • python3.5 Ubuntu 16.04 LTS 3.5.2-2ubuntu0~16.04.1

ubuntu advisories UBUNTU-CVE-2016-5636

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • python RHEL 7 2.7.5-48.el7
  • tkinter RHEL 7 2.7.5-48.el7
  • python-libs RHEL 7 2.7.5-48.el7
  • python-test RHEL 7 2.7.5-48.el7
  • python-tools RHEL 7 2.7.5-48.el7

red hat advisories RHSA-2016:2586

  • python SLE Module for Python 2 15 SP1, SLE Module for Desktop Applications 15 SP1, SLE Module for Desktop Applications 15 +2 more 2.7.17-7.32.2
  • python-base SLE Module for Python 2 15 SP1, SLE Module for Basesystem 15 SP1, SLE Module for Basesystem 15 2.7.17-7.32.1
  • python3 SLE Module for Basesystem 15 SP1, SLE Module for Basesystem 15 3.6.10-3.42.2
  • python3-base SLE Module for Development Tools 15 SP1, SLE Module for Development Tools 15, SLE Module for Basesystem 15 SP1 +1 more 3.6.10-3.42.2
  • python SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +3 more 2.6.9-40.15.1
  • python-base SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +3 more 2.6.9-40.15.1
  • python3 SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2, SLES 12 SP2 +1 more 3.4.5-19.1
  • python3-base SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2, SLES 12 SP2 +2 more 3.4.5-19.1

suse advisories SUSE-SU-2020:0234-1SUSE-SU-2020:0114-1SUSE-SU-2019:0223-1SUSE-SU-2018:2408-1SUSE-SU-2016:2859-1SUSE-SU-2016:2653-1

  • python openSUSE Tumbleweed 2.7.12-1.5
  • python-base openSUSE Tumbleweed 2.7.12-1.4
  • python36 openSUSE Tumbleweed 3.6.15-1.1
  • python3 openSUSE Leap 15.1 3.6.10-lp151.6.7.1
  • python3-base openSUSE Leap 15.1 3.6.10-lp151.6.7.1

opensuse advisories openSUSE-SU-2024:10450-1openSUSE-SU-2024:10536-1openSUSE-SU-2024:11284-1openSUSE-SU-2020:0086-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-5636 updated cvss 4.5

python: Heap overflow in zipimporter module

  • Red Hat Enterprise Linux 5 python Red Hat Enterprise Linux 6 python, tkinter, python-libs, python-test, python-tools Red Hat Software Collections python27-python, python33-python, python27-tkinter, rh-python34-python, rh-python35-python, python27-python-libs, +14 more
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux Client (v. 7) python 2.7.5-48.el7, python-libs 2.7.5-48.el7 Red Hat Enterprise Linux Client Optional (v. 7) tkinter 2.7.5-48.el7, python-test 2.7.5-48.el7, python-tools 2.7.5-48.el7 Red Hat Enterprise Linux ComputeNode (v. 7) python 2.7.5-48.el7, python-libs 2.7.5-48.el7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) tkinter 2.7.5-48.el7, python-test 2.7.5-48.el7, python-tools 2.7.5-48.el7 Red Hat Enterprise Linux Server (v. 7) python 2.7.5-48.el7, python-libs 2.7.5-48.el7 Red Hat Enterprise Linux Server Optional (v. 7) tkinter 2.7.5-48.el7, python-test 2.7.5-48.el7, python-tools 2.7.5-48.el7
    +2 more products
    Red Hat Enterprise Linux Workstation (v. 7) python 2.7.5-48.el7, python-libs 2.7.5-48.el7 Red Hat Enterprise Linux Workstation Optional (v. 7) tkinter 2.7.5-48.el7, python-test 2.7.5-48.el7, python-tools 2.7.5-48.el7
    fixed: vendor fix RHSA-2016:2586
  • Red Hat Enterprise Linux 6 jython, jython-demo, jython-manual, jython-javadoc
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

25.48% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.