CVE-2013-1752
Not scored
smtplib unlimited read
The smtplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious SMTP server can trick the smtplib module to consume large amounts of memory.
Exploit probability
Not scored
Published
June 3, 2019
Required by
Not available
Last source change
October 9, 2025
02 / AFFECTED SOFTWARE
Affected packages
169 explicit affected versions
04 / EVIDENCE
Source records
Open Source Vulnerabilities
PSF-2019-1
View original source
The smtplib module doesn't limit the amount of read data in its call to readline(). An erroneous or malicious SMTP server can trick the smtplib module to consume large amounts of memory.
05 / REFERENCES