Описание
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
lucid | released | 2.6.5-1ubuntu6.3 |
precise | DNE | |
quantal | DNE | |
saucy | DNE | |
upstream | ignored | end of life |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | released | 2.7.6-7 |
lucid | DNE | |
precise | released | 2.7.3-0ubuntu3.5 |
quantal | released | 2.7.3-5ubuntu4.4 |
saucy | released | 2.7.5-8ubuntu3.1 |
upstream | ignored | end of life |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
lucid | ignored | end of life |
precise | DNE | |
quantal | DNE | |
saucy | DNE | |
upstream | needed |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
lucid | DNE | |
precise | released | 3.2.3-0ubuntu3.6 |
quantal | released | 3.2.3-6ubuntu3.5 |
saucy | DNE | |
upstream | needed |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | 3.3.5~rc1-1 |
lucid | DNE | |
precise | DNE | |
quantal | released | 3.3.0-1ubuntu0.2 |
saucy | released | 3.3.2-7ubuntu3.1 |
upstream | needed |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | 3.4~rc1-1build1 |
lucid | DNE | |
precise | DNE | |
quantal | DNE | |
saucy | DNE | |
upstream | needed |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Buffer overflow in the socket.recvfrom_into function in Modules/socket ...
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
ELSA-2015-1330: python security, bug fix, and enhancement update (MODERATE)
EPSS
7.5 High
CVSS2