CVE-2014-4616
EUVD-2022-331024.08.2017, 20:29
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | python | 2.7.0 ≤ 𝑥 < 2.7.7 |
| python | python | 3.0.0 ≤ 𝑥 < 3.2.6 |
| python | python | 3.3.0 ≤ 𝑥 < 3.3.6 |
| python | python | 3.4.0 ≤ 𝑥 < 3.4.1 |
| simplejson_project | simplejson | 𝑥 < 2.6.1 |
| opensuse | opensuse | 13.1 |
| opensuse_project | opensuse | 12.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.7 |
| ||||||||||||
| python3.2 |
| ||||||||||||
| python3.4 |
|
References