CVE-2014-1912
NoneCVSS
—
EPSS
28.1%
Published
Mar 1, 2014
CISA due date
—
The record
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | python2.7 | 0 | 2.7.6-6 |
| Debian:11 | python2.7 | 0 | 2.7.6-6 |
| Debian:6.0 | python2.6 | 0 | 2.6.6-8+deb6u1 |
| Debian:7 | python2.7 | 0 | 2.7.3-6+deb7u2 |
| Mageia:3 | python | 0 | 2.7.6-1.mga3 |
| Mageia:3 | python3 | 0 | 3.3.0-4.6.mga3 |
| Mageia:4 | python | 0 | 2.7.6-1.mga4 |
| Mageia:4 | python3 | 0 | 3.3.2-13.1.mga4 |
| Red Hat:enterprise_linux:6::client | python | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | python-debuginfo | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | python-devel | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | python-libs | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | python-test | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | python-tools | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::client | tkinter | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python-debuginfo | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python-devel | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python-libs | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python-test | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | python-tools | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::computenode | tkinter | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python-debuginfo | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python-devel | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python-libs | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python-test | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | python-tools | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::server | tkinter | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python-debuginfo | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python-devel | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python-libs | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python-test | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | python-tools | 0 | 0:2.6.6-64.el6 |
| Red Hat:enterprise_linux:6::workstation | tkinter | 0 | 0:2.6.6-64.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27 | 0 | 0:1.1-17.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-debug | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-debuginfo | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-devel | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-libs | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-pip | 0 | 0:1.5.6-5.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-setuptools | 0 | 0:0.9.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-simplejson | 0 | 0:3.2.0-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-simplejson-debuginfo | 0 | 0:3.2.0-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-test | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-tools | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-python-wheel | 0 | 0:0.24.0-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-runtime | 0 | 0:1.1-17.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-scldevel | 0 | 0:1.1-17.el6 |
| Red Hat:rhel_software_collections:2::el6 | python27-tkinter | 0 | 0:2.7.8-3.el6 |
| Red Hat:rhel_software_collections:2::el7 | python27 | 0 | 0:1.1-20.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-debug | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-debuginfo | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-devel | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-libs | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-pip | 0 | 0:1.5.6-5.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-setuptools | 0 | 0:0.9.8-5.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-simplejson | 0 | 0:3.2.0-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-simplejson-debuginfo | 0 | 0:3.2.0-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-test | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-tools | 0 | 0:2.7.8-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-python-wheel | 0 | 0:0.24.0-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-runtime | 0 | 0:1.1-20.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-scldevel | 0 | 0:1.1-20.el7 |
| Red Hat:rhel_software_collections:2::el7 | python27-tkinter | 0 | 0:2.7.8-3.el7 |
| SUSE:Linux Enterprise Module for Basesystem 15 | python | 0 | 2.7.17-7.32.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 | python-base | 0 | 2.7.17-7.32.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | python | 0 | 2.7.17-7.32.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | python-base | 0 | 2.7.17-7.32.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 | python | 0 | 2.7.17-7.32.2 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | python | 0 | 2.7.17-7.32.2 |
| SUSE:Linux Enterprise Module for Python 2 15 SP1 | python | 0 | 2.7.17-7.32.2 |
| SUSE:Linux Enterprise Module for Python 2 15 SP1 | python-base | 0 | 2.7.17-7.32.1 |
| openSUSE:Tumbleweed | python | 0 | 2.7.18-8.1 |
| openSUSE:Tumbleweed | python-base | 0 | 2.7.12-1.4 |
Related vulnerabilities
- CVE-2024-0450 An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7… Also affects python2.7
- CVE-2010-2089 The audioop module in Python 2.7 and 3.2 does not verify the relationships between size… Also affects python2.7
- CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path names… Also affects python2.7
- CVE-2024-6232 There is a MEDIUM severity vulnerability affecting CPython. Also affects python2.7
- CVE-2024-8088 There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting… Also affects python2.7
- CVE-2024-6923 There is a MEDIUM severity vulnerability affecting CPython. Also affects python2.7
- CVE-2024-5642 CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for… Also affects python2.7
- CVE-2024-0397 A defect was discovered in the Python “ssl” module where there is a memory race condition… Also affects python2.7