CVE-2014-1912

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
pythonpython
2.5.1
pythonpython
2.5.2
pythonpython
2.5.3
pythonpython
2.5.4
pythonpython
2.5.6
pythonpython
2.5.150
pythonpython
2.6.1
pythonpython
2.6.2
pythonpython
2.6.3
pythonpython
2.6.4
pythonpython
2.6.5
pythonpython
2.6.6
pythonpython
2.6.7
pythonpython
2.6.8
pythonpython
2.6.2150
pythonpython
2.6.6150
pythonpython
2.7.1
pythonpython
2.7.1:rc1
pythonpython
2.7.2:rc1
pythonpython
2.7.3
pythonpython
2.7.4
pythonpython
2.7.5
pythonpython
2.7.6
pythonpython
2.7.1150
pythonpython
2.7.1150
pythonpython
2.7.2150
applemac_os_x
𝑥
≤ 10.10.4
pythonpython
3.0
pythonpython
3.0.1
pythonpython
3.1
pythonpython
3.1.1
pythonpython
3.1.2
pythonpython
3.1.3
pythonpython
3.1.4
pythonpython
3.1.5
pythonpython
3.1.2150
pythonpython
3.2
pythonpython
3.2:alpha
pythonpython
3.2.0
pythonpython
3.2.1
pythonpython
3.2.2
pythonpython
3.2.3
pythonpython
3.2.4
pythonpython
3.2.5
pythonpython
3.2.2150
pythonpython
3.3
pythonpython
3.3:beta2
pythonpython
3.3.0
pythonpython
3.3.1
pythonpython
3.3.2
pythonpython
3.3.3
pythonpython
3.4:alpha1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.6
saucy
dne
quantal
dne
precise
dne
lucid
Fixed 2.6.5-1ubuntu6.3
released
python2.7
saucy
Fixed 2.7.5-8ubuntu3.1
released
quantal
Fixed 2.7.3-5ubuntu4.4
released
precise
Fixed 2.7.3-0ubuntu3.5
released
lucid
dne
python3.1
saucy
dne
quantal
dne
precise
dne
lucid
ignored
python3.2
saucy
dne
quantal
Fixed 3.2.3-6ubuntu3.5
released
precise
Fixed 3.2.3-0ubuntu3.6
released
lucid
dne
python3.3
saucy
Fixed 3.3.2-7ubuntu3.1
released
quantal
Fixed 3.3.0-1ubuntu0.2
released
precise
dne
lucid
dne
python3.4
saucy
dne
quantal
dne
precise
dne
lucid
dne
References