PT-2014-4362 · Python+4 · Python+4

Published

2014-02-06

·

Updated

2024-06-15

·

CVE-2014-1912

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Python versions 2.5 through 2.7.6 Python versions 3.x through 3.3.3 Python versions 3.4.x through 3.4rc1 before the release
Description The issue is related to a buffer overflow in the socket.recvfrom into function in Modules/socketmodule.c. This allows remote attackers to execute arbitrary code via a crafted string.
Recommendations For Python versions 2.5 through 2.7.6, update to version 2.7.7 or later. For Python versions 3.x through 3.3.3, update to version 3.3.4 or later. For Python versions 3.4.x through 3.4rc1 before the release, update to version 3.4 or later.

Exploit

Fix

RCE

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-2376
ALT-PU-2016-1294
CESA-2015_1330
CVE-2014-1912
DLA-25-1
DSA-2880-1
MGASA-2014-0085
OPENSUSE-SU-2024:10536-1
OPENSUSE-SU-2024:11202-1
PSF-2014-4
RHSA-2015:1064
RHSA-2015:1330
RHSA-2015_1330
SUSE-SU-2014_0576-1
SUSE-SU-2020:0234-1

Affected Products

Alt Linux
Centos
Python
Red Hat
Suse