PT-2014-6024 · Bob Ippolito+5 · Simplejson+5

Publicado 2014-06-26 · Atualizado 2022-07-13 · CVE-2014-4616

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Python versions 2.7 through 3.5 simplejson versions prior to 2.6.1

Description The issue is related to an array index error in the scanstring function in the json module. This error allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw decode function.

Recommendations For Python versions 2.7 through 3.5, update to a version later than 3.5 to resolve the issue. For simplejson versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Exploit

Correção

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-129

Identificadores relacionados

ALT-PU-2014-2376

ALT-PU-2016-1294

CESA-2015_2101

CVE-2014-4616

GHSA-9772-CWX9-R4CJ

MGASA-2014-0285

MGASA-2014-0286

PSF-2017-1

RHSA-2015:1064

RHSA-2015:2101

RHSA-2015_2101

USN-2653-1

Produtos afetados

Alt Linux

Centos

Python

Red Hat

Ubuntu

Simplejson

Referências · 44

• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥 https://github.com/bunseokbot/CVE-2016-5699-poc · Exploit
• 🔥 https://hackerone.com/reports/12297 · Exploit
• https://github.com/simplejson/simplejson · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2014-June/134903.html · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2014-0286 · Aviso do Fabricante
• https://osv.dev/vulnerability/PSF-2017-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1112285 · Correção
• http://openwall.com/lists/oss-security/2014/06/24/7 · Nota
• https://advisories.mageia.org/MGASA-2014-0286.html · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-4616 · Nota de Segurança
• https://security.gentoo.org/glsa/201503-10 · Aviso do Fabricante, Correção
• https://ubuntu.com/security/CVE-2014-7185 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-4616 · Aviso do Fabricante