vulnerability

Alpine Linux: CVE-2014-4616: Improper Validation of Array Index

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Aug 24, 2017
Added
Oct 1, 2024
Modified
Aug 8, 2025

Description

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

Solutions

alpine-linux-upgrade-pythonalpine-linux-upgrade-python2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.