CVE-2014-7185

EUVD-2014-7062
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
pythonpython
𝑥
≤ 2.7.7
pythonpython
2.7.1
pythonpython
2.7.1:rc1
pythonpython
2.7.2:rc1
pythonpython
2.7.3
pythonpython
2.7.4
pythonpython
2.7.5
pythonpython
2.7.6
pythonpython
2.7.1150
pythonpython
2.7.1150
pythonpython
2.7.2150
applemac_os_x
𝑥
≤ 10.10.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
lucid
dne
precise
Fixed 2.7.3-0ubuntu3.8
released
trusty
Fixed 2.7.6-8ubuntu0.2
released
utopic
not-affected
vivid
not-affected
python3.2
lucid
dne
precise
not-affected
saucy
dne
trusty
dne
utopic
dne
vivid
dne
python3.4
lucid
dne
precise
dne
saucy
dne
trusty
not-affected
utopic
not-affected
vivid
not-affected
Common Weakness Enumeration
References