Описание
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| lucid | released  | 2.6.5-1ubuntu6.3 | 
| precise | DNE  | |
| quantal | DNE  | |
| saucy | DNE  | |
| upstream | ignored  | end of life | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | released  | 2.7.6-7 | 
| lucid | DNE  | |
| precise | released  | 2.7.3-0ubuntu3.5 | 
| quantal | released  | 2.7.3-5ubuntu4.4 | 
| saucy | released  | 2.7.5-8ubuntu3.1 | 
| upstream | ignored  | end of life | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| lucid | ignored  | end of life | 
| precise | DNE  | |
| quantal | DNE  | |
| saucy | DNE  | |
| upstream | needed  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| lucid | DNE  | |
| precise | released  | 3.2.3-0ubuntu3.6 | 
| quantal | released  | 3.2.3-6ubuntu3.5 | 
| saucy | DNE  | |
| upstream | needed  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | not-affected  | 3.3.5~rc1-1 | 
| lucid | DNE  | |
| precise | DNE  | |
| quantal | released  | 3.3.0-1ubuntu0.2 | 
| saucy | released  | 3.3.2-7ubuntu3.1 | 
| upstream | needed  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | not-affected  | 3.4~rc1-1build1 | 
| lucid | DNE  | |
| precise | DNE  | |
| quantal | DNE  | |
| saucy | DNE  | |
| upstream | needed  | 
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
Buffer overflow in the socket.recvfrom_into function in Modules/socket ...
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
ELSA-2015-1330: python security, bug fix, and enhancement update (MODERATE)
EPSS
7.5 High
CVSS2