Back to search
CVE-2014-1912
Published: Feb 28, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://hg.python.org/cpython/rev/87673659d8f7
x_refsource_CONFIRM
openSUSE-SU-2014:0518
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2014:0597
vendor-advisory
x_refsource_SUSE
RHSA-2015:1064
vendor-advisory
x_refsource_REDHAT
http://pastebin.com/raw.php?i=GHXSmNEg
x_refsource_MISC
http://bugs.python.org/issue20246
x_refsource_CONFIRM
DSA-2880
vendor-advisory
x_refsource_DEBIAN
GLSA-201503-10
vendor-advisory
x_refsource_GENTOO
65379
vdb-entry
x_refsource_BID
[oss-security] 20140212 Re: CVE request? buffer overflow in socket.recvfrom_into
mailing-list
x_refsource_MLIST
APPLE-SA-2015-08-13-2
vendor-advisory
x_refsource_APPLE
RHSA-2015:1330
vendor-advisory
x_refsource_REDHAT
31875
exploit
x_refsource_EXPLOIT-DB
https://support.apple.com/kb/HT205031
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
x_refsource_CONFIRM
USN-2125-1
vendor-advisory
x_refsource_UBUNTU
1029831
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now