CVE

Id
74485  
CVE No.
CVE-2014-7185  
Status
Candidate  
Description
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.  
Phase
Assigned (20140925)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
694613 74485 CVE-2014-7185 MLIST:[oss-security] 20140923 CVE Request: Python 2.7  View
694614 74485 CVE-2014-7185 URL:http://www.openwall.com/lists/oss-security/2014/09/23/5  View
694615 74485 CVE-2014-7185 MLIST:[oss-security] 20140925 Re: CVE Request: Python 2.7  View
694616 74485 CVE-2014-7185 URL:http://www.openwall.com/lists/oss-security/2014/09/25/47  View
694617 74485 CVE-2014-7185 CONFIRM:http://bugs.python.org/issue21831  View
694618 74485 CVE-2014-7185 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1146026  View
694619 74485 CVE-2014-7185 CONFIRM:https://support.apple.com/kb/HT205031  View
694620 74485 CVE-2014-7185 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
694621 74485 CVE-2014-7185 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
694622 74485 CVE-2014-7185 APPLE:APPLE-SA-2015-08-13-2  View
694623 74485 CVE-2014-7185 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html  View
694624 74485 CVE-2014-7185 FEDORA:FEDORA-2014-11559  View
694625 74485 CVE-2014-7185 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html  View
694626 74485 CVE-2014-7185 SUSE:openSUSE-SU-2014:1292  View
694627 74485 CVE-2014-7185 URL:http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html  View
694628 74485 CVE-2014-7185 BID:70089  View
694629 74485 CVE-2014-7185 URL:http://www.securityfocus.com/bid/70089  View
694630 74485 CVE-2014-7185 XF:python-bufferobject-overflow(96193)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18537 JVNDB-2014-007412 Node.js 用 crumb プラグインにおける重要な情報を取得される脆弱性 Node.js 用 crumb プラグインは、hapi ルートハンドラで CORS が有効である状況においてトークンアクセスを適切に制限しないため、重要な情報を取得され、潜在的に非 CORS ルートへのリクエストを偽装される脆弱性が存在します。 CVE-2014-7193 74485 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007412.html  View