CVE-2014-1912

EUVD-2014-1973
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
pythonpython
2.5.1
pythonpython
2.5.2
pythonpython
2.5.3
pythonpython
2.5.4
pythonpython
2.5.6
pythonpython
2.5.150
pythonpython
2.6.1
pythonpython
2.6.2
pythonpython
2.6.3
pythonpython
2.6.4
pythonpython
2.6.5
pythonpython
2.6.6
pythonpython
2.6.7
pythonpython
2.6.8
pythonpython
2.6.2150
pythonpython
2.6.6150
pythonpython
2.7.1
pythonpython
2.7.1:rc1
pythonpython
2.7.2:rc1
pythonpython
2.7.3
pythonpython
2.7.4
pythonpython
2.7.5
pythonpython
2.7.6
pythonpython
2.7.1150
pythonpython
2.7.1150
pythonpython
2.7.2150
applemac_os_x
𝑥
≤ 10.10.4
pythonpython
3.0
pythonpython
3.0.1
pythonpython
3.1
pythonpython
3.1.1
pythonpython
3.1.2
pythonpython
3.1.3
pythonpython
3.1.4
pythonpython
3.1.5
pythonpython
3.1.2150
pythonpython
3.2
pythonpython
3.2:alpha
pythonpython
3.2.0
pythonpython
3.2.1
pythonpython
3.2.2
pythonpython
3.2.3
pythonpython
3.2.4
pythonpython
3.2.5
pythonpython
3.2.2150
pythonpython
3.3
pythonpython
3.3:beta2
pythonpython
3.3.0
pythonpython
3.3.1
pythonpython
3.3.2
pythonpython
3.3.3
pythonpython
3.4:alpha1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.6
lucid
Fixed 2.6.5-1ubuntu6.3
released
precise
dne
quantal
dne
saucy
dne
python2.7
lucid
dne
precise
Fixed 2.7.3-0ubuntu3.5
released
quantal
Fixed 2.7.3-5ubuntu4.4
released
saucy
Fixed 2.7.5-8ubuntu3.1
released
python3.1
lucid
ignored
precise
dne
quantal
dne
saucy
dne
python3.2
lucid
dne
precise
Fixed 3.2.3-0ubuntu3.6
released
quantal
Fixed 3.2.3-6ubuntu3.5
released
saucy
dne
python3.3
lucid
dne
precise
dne
quantal
Fixed 3.3.0-1ubuntu0.2
released
saucy
Fixed 3.3.2-7ubuntu3.1
released
python3.4
lucid
dne
precise
dne
quantal
dne
saucy
dne
References