CVE-2014-7185

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
pythonpython
𝑥
≤ 2.7.7
pythonpython
2.7.1
pythonpython
2.7.1:rc1
pythonpython
2.7.2:rc1
pythonpython
2.7.3
pythonpython
2.7.4
pythonpython
2.7.5
pythonpython
2.7.6
pythonpython
2.7.1150
pythonpython
2.7.1150
pythonpython
2.7.2150
applemac_os_x
𝑥
≤ 10.10.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
squeeze
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
vivid
not-affected
utopic
not-affected
trusty
Fixed 2.7.6-8ubuntu0.2
released
precise
Fixed 2.7.3-0ubuntu3.8
released
lucid
dne
python3.2
vivid
dne
utopic
dne
trusty
dne
saucy
dne
precise
not-affected
lucid
dne
python3.4
vivid
not-affected
utopic
not-affected
trusty
not-affected
saucy
dne
precise
dne
lucid
dne
Common Weakness Enumeration
References