Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python | Aug 30, 2017 | Oct 8, 2014 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Oct 8, 2014 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Mar 29, 2016 | Oct 8, 2014 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Oct 8, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 21, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Oct 8, 2014 |
| Oracle Solaris | — | Upgrade runtime/python-26 to version 2.6.8-0.175.2.4.0.6.0 on Solaris 11.2 | May 29, 2017 | Oct 8, 2014 |
| Oracle_linux | — | Upgrade tkinterUpgrade python27-python-wheelUpgrade python27-python-pipUpgrade python27-python-simplejsonUpgrade pythonUpgrade python-toolsUpgrade python-testUpgrade python27-python-develUpgrade python-libsUpgrade python27-scldevelUpgrade python-develUpgrade python27-python-debugUpgrade python27-python-toolsUpgrade python27-python-setuptoolsUpgrade python27-runtimeUpgrade python27-pythonUpgrade python27-python-testUpgrade python-debugUpgrade python27-tkinterUpgrade python27-python-libsUpgrade python27 | Oct 16, 2024 | Oct 8, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 23, 2014 |
| Suse | — | Upgrade python-cursesUpgrade python-develUpgrade libpython2_6-1_0Upgrade python-xmlUpgrade python-32bitUpgrade pythonUpgrade python-baseUpgrade libpython2_6-1_0-32bitUpgrade python-doc-pdfUpgrade libpython2_7-1_0Upgrade libpython2_7-1_0-32bitUpgrade python-docUpgrade python-tkUpgrade python-demoUpgrade python-base-x86Upgrade python-base-32bitUpgrade libpython2_6-1_0-x86Upgrade python-x86Upgrade python-gdbmUpgrade python-idle | Dec 18, 2015 | Oct 8, 2014 |
| Ubuntu | — | Upgrade python2.7Upgrade python3.2-minimalUpgrade python3.4-minimalUpgrade python3.4Upgrade python2.7-minimalUpgrade python3.2 | Nov 8, 2024 | Oct 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub