CVE-2013-1753

27

FAUCET Score

CVE-2013-1753 describes a denial-of-service vulnerability in the gzip_decode function of the xmlrpc client library in Python 3.4 and earlier versions. An unauthenticated remote attacker can exploit this by sending a specially crafted HTTP request, leading to excessive memory consumption on the affected system. Rated 7.5 HIGH, this vulnerability has a low attack complexity and requires no user interaction, but only impacts availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 2.7.0, < 2.7.9CPE matchmatch criteria	cpe:2.3:a:python:python::::::::
		>= 3.2.0, < 3.2.6CPE matchmatch criteria	cpe:2.3:a:python:python::::::::
		>= 3.3.0, < 3.3.6CPE matchmatch criteria	cpe:2.3:a:python:python::::::::
		>= 3.4.0, < 3.4.3CPE matchmatch criteria	cpe:2.3:a:python:python::::::::

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

4.01%

Probability of exploitation in next 30 days

EPSS Percentile

89.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0401 is in the 81st percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (27)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: python-0:2.7.5-34.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-0:1.1-17.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-python-0:2.7.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-python-pip-0:1.5.6-5.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-python-setuptools-0:0.9.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-python-simplejson-0:3.2.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: python27-python-wheel-0:0.24.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-0:1.1-17.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-python-0:2.7.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-python-pip-0:1.5.6-5.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-python-setuptools-0:0.9.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-python-simplejson-0:3.2.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUSFixed in: python27-python-wheel-0:0.24.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-0:1.1-17.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-python-0:2.7.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-python-pip-0:1.5.6-5.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-python-setuptools-0:0.9.8-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-python-simplejson-0:3.2.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: python27-python-wheel-0:0.24.0-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-0:1.1-20.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-python-0:2.7.8-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-python-pip-0:1.5.6-5.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-python-setuptools-0:0.9.8-5.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-python-simplejson-0:3.2.0-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: python27-python-wheel-0:0.24.0-2.el7

redhatno patchvia redhat_api

Product: Red Hat Software CollectionsFixed in: python27-python

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: python33-python

Vendor Advisories (1)

redhatCVE-2013-1753Moderate

python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding

References

bugs.python.org / issue16043

Issue TrackingPatchVendor Advisory