CVE-2014-1912
01.03.2014, 00:55
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | python | 2.5.1 |
| python | python | 2.5.2 |
| python | python | 2.5.3 |
| python | python | 2.5.4 |
| python | python | 2.5.6 |
| python | python | 2.5.150 |
| python | python | 2.6.1 |
| python | python | 2.6.2 |
| python | python | 2.6.3 |
| python | python | 2.6.4 |
| python | python | 2.6.5 |
| python | python | 2.6.6 |
| python | python | 2.6.7 |
| python | python | 2.6.8 |
| python | python | 2.6.2150 |
| python | python | 2.6.6150 |
| python | python | 2.7.1 |
| python | python | 2.7.1:rc1 |
| python | python | 2.7.2:rc1 |
| python | python | 2.7.3 |
| python | python | 2.7.4 |
| python | python | 2.7.5 |
| python | python | 2.7.6 |
| python | python | 2.7.1150 |
| python | python | 2.7.1150 |
| python | python | 2.7.2150 |
| apple | mac_os_x | 𝑥 ≤ 10.10.4 |
| python | python | 3.0 |
| python | python | 3.0.1 |
| python | python | 3.1 |
| python | python | 3.1.1 |
| python | python | 3.1.2 |
| python | python | 3.1.3 |
| python | python | 3.1.4 |
| python | python | 3.1.5 |
| python | python | 3.1.2150 |
| python | python | 3.2 |
| python | python | 3.2:alpha |
| python | python | 3.2.0 |
| python | python | 3.2.1 |
| python | python | 3.2.2 |
| python | python | 3.2.3 |
| python | python | 3.2.4 |
| python | python | 3.2.5 |
| python | python | 3.2.2150 |
| python | python | 3.3 |
| python | python | 3.3:beta2 |
| python | python | 3.3.0 |
| python | python | 3.3.1 |
| python | python | 3.3.2 |
| python | python | 3.3.3 |
| python | python | 3.4:alpha1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| python2.6 |
| ||||||||
| python2.7 |
| ||||||||
| python3.1 |
| ||||||||
| python3.2 |
| ||||||||
| python3.3 |
| ||||||||
| python3.4 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpython2_7-1_0 |
| ||||||||||||||||||||||||||||
| libpython2_7-1_0-32bit |
| ||||||||||||||||||||||||||||
| python |
| ||||||||||||||||||||||||||||
| python-base |
| ||||||||||||||||||||||||||||
| python-base-32bit |
| ||||||||||||||||||||||||||||
| python-curses |
| ||||||||||||||||||||||||||||
| python-devel |
| ||||||||||||||||||||||||||||
| python-gdbm |
| ||||||||||||||||||||||||||||
| python-xml |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References