PT-2014-7822 · Python+5 · Python+5

Publicado 2014-07-01 · Atualizado 2024-06-15 · CVE-2014-7185

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Python versions prior to 2.7.8

Description The issue allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. This is due to an integer overflow in bufferobject.c.

Recommendations For versions prior to 2.7.8, update to version 2.7.8 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2014-2376

CESA-2015_1330

CESA-2015_2101

CVE-2014-7185

MGASA-2014-0399

OPENSUSE-SU-2024:10536-1

OPENSUSE-SU-2024:11202-1

PSF-2014-6

RHSA-2015:1064

RHSA-2015:1330

RHSA-2015:2101

RHSA-2015_1330

RHSA-2015_2101

SUSE-SU-2014_1511-1

SUSE-SU-2014_1518-1

SUSE-SU-2015:1344-1

SUSE-SU-2020:0234-1

USN-2653-1

Produtos afetados

Alt Linux

Centos

Python

Red Hat

Suse

Ubuntu

Referências · 245

• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/09/23/5 · Exploit
• 🔥 http://bugs.python.org/issue21831 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1146026 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb · Nota
• https://github.com/Tripwire/OpenSSL-CCS-Inject-Test · Nota
• https://bugzilla.suse.com/827982 · Nota
• https://bugzilla.suse.com/682554 · Nota
• https://osv.dev/vulnerability/MGASA-2014-0399 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2014-7185 · Nota
• https://bugzilla.suse.com/1042670 · Nota
• https://bdu.fstec.ru/vul/2015-04313 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05847 · Nota de Segurança
• https://bugzilla.suse.com/1041090 · Nota