PT-2014-4362 · Python+4 · Python+4

Publicado

2014-02-06

·

Atualizado

2024-06-15

·

CVE-2014-1912

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Python versions 2.5 through 2.7.6 Python versions 3.x through 3.3.3 Python versions 3.4.x through 3.4rc1 before the release
Description The issue is related to a buffer overflow in the socket.recvfrom into function in Modules/socketmodule.c. This allows remote attackers to execute arbitrary code via a crafted string.
Recommendations For Python versions 2.5 through 2.7.6, update to version 2.7.7 or later. For Python versions 3.x through 3.3.3, update to version 3.3.4 or later. For Python versions 3.4.x through 3.4rc1 before the release, update to version 3.4 or later.

Exploit

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-2376
ALT-PU-2016-1294
CESA-2015_1330
CVE-2014-1912
DLA-25-1
DSA-2880-1
MGASA-2014-0085
OPENSUSE-SU-2024:10536-1
OPENSUSE-SU-2024:11202-1
PSF-2014-4
RHSA-2015:1064
RHSA-2015:1330
RHSA-2015_1330
SUSE-SU-2014_0576-1
SUSE-SU-2020:0234-1

Produtos afetados

Alt Linux
Centos
Python
Red Hat
Suse