CVE-2004-0150: Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allo...

Security readout for executives and security teams

This is an old Python 2.2 flaw where a DNS result could trigger memory corruption when Python was built without IPv6 support. In the right legacy environment, a remote attacker could potentially run code. The business risk is mainly unmanaged or embedded systems still carrying Python 2.2-era packages. Exposure is likely limited to legacy Python 2.2 before 2.2.2, especially distro or embedded builds compiled with IPv6 disabled and using DNS resolution on attacker-influenced names. Treat as a legacy cleanup priority with high impact if found. It should not distract from current KEV-driven work unless Python 2.2 exists in production, internet-facing, or embedded assets. Mitigation focus: Upgrade Python 2.2 installations to 2.2.2 or later where this legacy runtime remains present.; Prefer removing Python 2.2 entirely from supported production environments.; Check Debian, Gentoo, Mandrake, or platform vendor advisories for backported package fixes..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.