The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python2Upgrade python | Oct 1, 2024 | Aug 24, 2017 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Aug 24, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Aug 24, 2017 |
| Oracle_linux | — | Upgrade python27-scldevelUpgrade python27-python-libsUpgrade python27-python-testUpgrade pythonUpgrade python-toolsUpgrade python27-python-toolsUpgrade python27-runtimeUpgrade python-debugUpgrade python27-pythonUpgrade python27-python-wheelUpgrade python27-python-simplejsonUpgrade python27-python-setuptoolsUpgrade python-libsUpgrade python27Upgrade python27-tkinterUpgrade python-testUpgrade python27-python-develUpgrade python-develUpgrade python27-python-pipUpgrade python27-python-debugUpgrade tkinter | Oct 16, 2024 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2017 |
| Suse | — | Upgrade python-demoUpgrade python3-tk-debuginfoUpgrade python-debuginfo-32bitUpgrade python3Upgrade python3-debugsourceUpgrade python3-cursesUpgrade python-curses-debuginfoUpgrade python-base-32bitUpgrade python3-tkUpgrade python3-docUpgrade python-base-debuginfo-32bitUpgrade python3-base-debuginfo-32bitUpgrade libpython2_7-1_0Upgrade libpython2_7-1_0-debuginfo-32bitUpgrade libpython2_7-1_0-debuginfoUpgrade python-cursesUpgrade python3-base-debugsourceUpgrade python3-base-32bitUpgrade python3-doc-pdfUpgrade python-develUpgrade python3-testsuite-debuginfoUpgrade python-xmlUpgrade python3-testsuiteUpgrade python-xml-debuginfoUpgrade python3-toolsUpgrade python-base-debuginfoUpgrade libpython3_3m1_0Upgrade python3-32bitUpgrade python-debuginfoUpgrade python-debugsourceUpgrade python3-baseUpgrade python3-debuginfo-32bitUpgrade python-docUpgrade python3-base-debuginfoUpgrade python-gdbmUpgrade python3-debuginfoUpgrade python3-devel-debuginfoUpgrade libpython2_7-1_0-32bitUpgrade python-doc-pdfUpgrade python-32bitUpgrade python-tkUpgrade python-gdbm-debuginfoUpgrade python-baseUpgrade python-tk-debuginfoUpgrade libpython3_3m1_0-debuginfo-32bitUpgrade python3-develUpgrade python-base-debugsourceUpgrade python3-idleUpgrade libpython3_3m1_0-debuginfoUpgrade python-idleUpgrade pythonUpgrade python3-dbmUpgrade libpython3_3m1_0-32bitUpgrade python3-dbm-debuginfoUpgrade python3-curses-debuginfo | Dec 18, 2015 | Jul 12, 2014 |
| Ubuntu | — | Upgrade python2.7Upgrade python3.4Upgrade python3.2-minimalUpgrade python2.7-minimalUpgrade python3.4-minimalUpgrade python3.2 | Nov 8, 2024 | Aug 24, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub