CVE-2014-1912

high · 7.5

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

7.5

CVSS

28.3%

EPSS (exploit prob.)

98th

EPSS percentile

2014-03-01

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
python	python	2.5.1
python	python	2.5.2
python	python	2.5.3
python	python	2.5.4
python	python	2.5.6
python	python	2.5.150
python	python	2.6.1
python	python	2.6.2
python	python	2.6.3
python	python	2.6.4
python	python	2.6.5
python	python	2.6.6
python	python	2.6.7
python	python	2.6.8
python	python	2.6.2150
python	python	2.6.6150
python	python	2.7.1
python	python	2.7.1
python	python	2.7.2
python	python	2.7.3
python	python	2.7.4
python	python	2.7.5
python	python	2.7.6
python	python	2.7.1150
python	python	2.7.1150
python	python	2.7.2150
apple	mac_os_x	<= 10.10.4
python	python	3.0
python	python	3.0.1
python	python	3.1
python	python	3.1.1
python	python	3.1.2
python	python	3.1.3
python	python	3.1.4
python	python	3.1.5
python	python	3.1.2150
python	python	3.2
python	python	3.2
python	python	3.2.0
python	python	3.2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-1912