Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-1912
HistoryMar 01, 2014 - 12:55 a.m.

CVE-2014-1912

2014-03-0100:55:00
Debian Security Bug Tracker
security-tracker.debian.org
12

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.53 Medium

EPSS

Percentile

97.6%

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

OSVersionArchitecturePackageVersionFilename
Debian11allpython2.7<Β 2.7.6-6python2.7_2.7.6-6_all.deb
Debian10allpython2.7<Β 2.7.6-6python2.7_2.7.6-6_all.deb

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.53 Medium

EPSS

Percentile

97.6%