Lucene search
GoogleOSV:DLA-25-3HistoryJul 31, 2014 - 12:00 a.m.
python2.6 - regression update
2014-07-3100:00:00
Google
osv.dev
12
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
A regression has been identified in the python2.6 update of DLA-25-1,
which may cause python applications to abort if they were running during
the upgrade but they had not already imported the โosโ module, and do so
after the upgrade. This update fixes this upgrade scenario.
For reference, the original advisory text follows.
Multiple vulnerabilities were discovered in python2.6. The more
relevant are:
- CVE-2013-4238
Incorrect handling of NUL bytes in certificate hostnames may allow
server spoofing via specially-crafted certificates signed by
a trusted Certification Authority. - CVE-2014-1912
Buffer overflow in socket.recvfrom_into leading to application
crash and possibly code execution.
For Debian 6 Squeeze, these issues have been fixed in python2.6 version 2.6.6-8+deb6u2
References
Related
osv
osv
python2.7 - security update
2014-03-17 00:00:00
python2.6 - regression update
2014-07-31 00:00:00
python2.6 - security update
2014-07-31 00:00:00
nessus
nessus
Debian DSA-2880-1 : python2.7 - security update
2014-03-18 00:00:00
openSUSE Security Update : python (openSUSE-SU-2014:0380-1)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : python (MDVSA-2014:041)
2014-02-20 00:00:00
debian
debian
[SECURITY] [DSA 2880-1] python2.7 security update
2014-03-17 18:07:37
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
openvas
openvas
Debian: Security Advisory (DSA-2880-1)
2014-03-16 00:00:00
Debian Security Advisory DSA 2880-1 (python2.7 - security update)
2014-03-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:1006-1)
2021-06-09 00:00:00
zdt
zdt
Python socket.recvfrom_into() remote buffer overflow exploit
2014-02-23 00:00:00
seebug
seebug
Python "sock_recvfrom_into()" ็ผๅฒๅบๆบขๅบๆผๆด
2014-02-25 00:00:00
Python socket.recvfrom_into() - Remote Buffer Overflow
2014-07-01 00:00:00
Pythonๅคไธชๅฎๅ
จๆผๆด
2013-12-30 00:00:00
exploitpack
exploitpack
Python - socket.recvfrom_into() Remote Buffer Overflow
2014-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-2.7.5-10.fc20
2014-02-14 07:51:33
[SECURITY] Fedora 20 Update: python3-3.3.2-9.fc20
2014-02-15 07:05:19
[SECURITY] Fedora 19 Update: python-2.7.5-4.fc19
2013-08-24 22:27:19
securityvulns
securityvulns
[ MDVSA-2014:041 ] python
2014-03-03 00:00:00
Python buffer overflow
2014-03-03 00:00:00
Python SSL certificate check bypass
2013-10-02 00:00:00
cve
cve
ubuntu
ubuntu
Python vulnerability
2014-03-03 00:00:00
Python 2.6 vulnerability
2013-10-01 00:00:00
Python 2.7 vulnerabilities
2013-10-01 00:00:00
debiancve
debiancve
CVE-2014-1912
2014-03-01 00:55:00
CVE-2013-4238
2013-08-18 02:52:00
freebsd
freebsd
Python -- buffer overflow in socket.recvfrom_into()
2014-01-14 00:00:00
amazon
amazon
Medium: python27
2014-02-26 14:28:00
Medium: python26
2014-02-26 14:28:00
Medium: python27
2013-09-04 13:31:00
prion
prion
Buffer overflow
2014-03-01 00:55:00
Design/Logic Flaw
2013-08-18 02:52:00
Design/Logic Flaw
2013-08-27 03:34:00
ubuntucve
ubuntucve
CVE-2014-1912
2014-02-21 00:00:00
CVE-2013-4238
2013-08-17 00:00:00
oraclelinux
oraclelinux
python security, bug fix, and enhancement update
2013-11-26 00:00:00
python security, bug fix, and enhancement update
2015-07-28 00:00:00
python27 security, bug fix, and enhancement update
2016-02-04 00:00:00
redhat
redhat
(RHSA-2013:1582) Moderate: python security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2015:1330) Moderate: python security, bug fix, and enhancement update
2015-07-22 00:00:00
centos
centos
python, tkinter security update
2013-11-26 13:32:42
python, tkinter security update
2015-07-26 14:11:19
exploitdb
exploitdb
Python - 'socket.recvfrom_into()' Remote Buffer Overflow
2014-02-24 00:00:00
mageia
mageia
Updated python & python3 packages fix multiple vulnerabilities
2014-02-20 01:24:08
Updated python3, bzr and some python packages fix security vulnerabilties
2013-08-22 21:58:14
Updated python packages fix CVE-2013-4328 and pip
2013-08-17 12:43:24
f5
f5
SOL15638 - Python vulnerability CVE-2013-4238
2014-09-29 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
Improper Input Validation
2019-05-02 05:39:24
Improper Input Validation
2019-05-02 05:39:24
ibm
ibm
gentoo
gentoo
Python: Multiple vulnerabilities
2015-03-18 00:00:00
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for OSV:DLA-25-3