NVD

Id
30448  
Name
CVE-2014-1912  
Description
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-02-28  
Modified Date
2016-11-28  
Seq
2014-1912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161081 30448 CVE-2014-1912 http://bugs.python.org/issue20246  View
161082 30448 CVE-2014-1912 http://hg.python.org/cpython/rev/87673659d8f7  View
161083 30448 CVE-2014-1912 APPLE-SA-2015-08-13-2  View
161084 30448 CVE-2014-1912 openSUSE-SU-2014:0597  View
161085 30448 CVE-2014-1912 http://pastebin.com/raw.php?i=GHXSmNEg  View
161086 30448 CVE-2014-1912 DSA-2880  View
161087 30448 CVE-2014-1912 31875  View
161088 30448 CVE-2014-1912 [oss-security] 20140212 Re: CVE request? buffer overflow in socket.recvfrom_into  View
161089 30448 CVE-2014-1912 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
161090 30448 CVE-2014-1912 65379  View
161091 30448 CVE-2014-1912 1029831  View
161092 30448 CVE-2014-1912 USN-2125-1  View
161093 30448 CVE-2014-1912 https://support.apple.com/kb/HT205031  View
161094 30448 CVE-2014-1912 https://www.trustedsec.com/february-2014/python-remote-code-execution-socket-recvfrom_into/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12667 JVNDB-2014-001542 Python の Modules/socketmodule.c の socket.recvfrom_into 関数におけるバッファオーバーフローの脆弱性 Python の Modules/socketmodule.c の socket.recvfrom_into 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-1912 69199 CVE-2014-1912 30448 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001542.html 2014-01-14 2015-08-31 View