CVE-2014-7185

Python < 2.7.8 - Information Disclosure via Buffer Object Integer Overflow

Title source: llm
STIX 2.1

Description

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

References (15)

Core 15
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/09/25/47
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1064.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201503-10
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1330.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/70089
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/96193
Exploit mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/09/23/5
Exploit x_refsource_confirm
http://bugs.python.org/issue21831
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT205031

Scores

EPSS 0.0113
EPSS Percentile 78.6%

Details

CWE
CWE-189
Status published
Products (10)
apple/mac_os_x < 10.10.4
python/python 2.7.1 (2 CPE variants)
python/python 2.7.2 rc1
python/python 2.7.3
python/python 2.7.4
python/python 2.7.5
python/python 2.7.6
python/python 2.7.1150 (2 CPE variants)
python/python 2.7.2150
python/python < 2.7.7
Published Oct 08, 2014
Tracked Since Feb 18, 2026