DLA-25-2 python2.6 - regression update

Bulletin has no description...

[DLA 25-1] python2.6 security update

Package : python2.6 Version : 2.6.6-8+deb6u1 CVE ID : CVE-2011-1015 CVE-2011-1521 CVE-2011-4940 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-4238 CVE-2014-1912 Multiple vulnerabilities were discovered in python2.6. The more relevant are: CVE-2013-4238 Incorrect handling of NUL bytes in...

DLA-25-1 python2.6 - security update

Bulletin has no description...

Python socket.recvfrom_into() - Remote Buffer Overflow

No description provided by source. !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-1912...

openSUSE Security Update : python (openSUSE-SU-2014:0518-1)

This python updated fixes the following security issue : - bnc863741: Fixed potential buffer overflow in socket.recvfrominto CVE-2014-1912. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : python (openSUSE-SU-2014:0380-1)

Python was updated to 2.7.6 to fix bugs and security issues : - bugfix-only release - SSL-related fixes - upstream fix for CVE-2013-4238 - upstream fixes for CVE-2013-1752 - added patches for CVE-2013-1752 bnc856836 issues that are missing in 2.7.6: python-2.7.6-imaplib.patch...

openSUSE Security Update : python3 (openSUSE-SU-2014:0597-1)

This python update fixes the following security and non-security issues : - bnc869222: Fixed DoS when opening malicious archives CVE-2013-7338. - bnc863741: Fixed buffer overflow in socket.recvfrominto CVE-2014-1912. - bnc871152: Fixed race condition with umask when creating directories with...

SuSE 11.3 Security Update : Python (SAT Patch Number 9075)

Python was updated to fix a security issue in the socket.recvfrominto function, where data could be written over the end of the buffer. CVE-2014-1912 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

Debian DSA-2880-1 : python2.7 - security update

Multiple security issues were discovered in Python : - CVE-2013-4238 Ryan Sleevi discovered that NULL characters in the subject alternate names of SSL cerficates were parsed incorrectly. - CVE-2014-1912 Ryan Smith-Roberts discovered a buffer overflow in the socket.recvfrominto function...

[SECURITY] [DSA 2880-1] python2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2880-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2014 http://www.debian.org/security/faq -...

DSA-2880-1 python2.7 - security update

Bulletin has no description...

Debian Security Advisory DSA 2880-1 (python2.7 - security update)

Multiple security issues were discovered in Python: CVE-2013-4238 Ryan Sleevi discovered that NULL characters in the subject alternate names of SSL cerficates were parsed incorrectly. CVE-2014-1912 Ryan Smith-Roberts discovered a buffer overflow in the socket.recvfrominto function. OpenVAS...

Debian: Security Advisory (DSA-2880-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2014:041 ] python

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:041 http://www.mandriva.com/en/support/security/ Package : python Date : February 19, 2014 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability was reported in Pythons...

CVE-2014-1912

Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string...

CVE-2014-1912

CVE-2014-1912 describes a buffer overflow in Python’s socket.recvfrom_into() (Modules/socketmodule.c) that could allow remote code execution. Affected releases include Python 2.5 up to 2.7.7, Python 3.x up to 3.3.4, and Python 3.4.x up to 3.4rc1. Public documentation in connected sources confirms...

Medium: python27

Issue Overview: Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string. Affected Packages: python27 Issue Correction: Run yum update...

Medium: python26

Issue Overview: Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string. Affected Packages: python26 Issue Correction: Run yum update...

Python "sock_recvfrom_into()" 缓冲区溢出漏洞

CVECAN ID: CVE-2014-1912 Python是一种面向对象、直译式计算机程序设计语言。 Python 2.7版本的"sockrecvfrominto"函数Modules/socketmodule.c存在边界错误，利用后可造成缓冲区溢出，执行任意代码。 0 Python python 2.7.x 厂商补丁： Python ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bugs.python.org/issue20246 !/usr/bin/env python ''' Exploit Title: python...

Python - 'socket.recvfrom_into()' Remote Buffer Overflow

!/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-1912 socket.recvfrominto remote buffer overflow Proof ...