Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python | Aug 30, 2017 | Feb 28, 2014 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Feb 28, 2014 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Mar 29, 2016 | Feb 28, 2014 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Mar 1, 2014 |
| Freebsd | — | Upgrade python32Upgrade python31Upgrade python27Upgrade python33 | Dec 10, 2025 | Mar 1, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Feb 28, 2014 |
| Oracle Solaris | — | Upgrade runtime/python-26 to version 2.6.8-0.175.1.17.0.4.0 on Solaris 11.1Upgrade runtime/python-27 to version 2.7.3-0.175.1.17.0.4.0 on Solaris 11.1 | May 29, 2017 | Feb 28, 2014 |
| Oracle_linux | — | Upgrade python27-python-pipUpgrade python27-python-setuptoolsUpgrade python27Upgrade python27-tkinterUpgrade python27-python-simplejsonUpgrade python27-python-toolsUpgrade python27-python-libsUpgrade python27-runtimeUpgrade python27-pythonUpgrade python27-python-wheelUpgrade python27-python-develUpgrade python27-python-debugUpgrade python27-python-testUpgrade python27-scldevel | Oct 16, 2024 | Feb 28, 2014 |
| Suse | — | Upgrade python-x86Upgrade python-tkUpgrade python-cursesUpgrade python-xmlUpgrade python-gdbmUpgrade libpython2_7-1_0Upgrade python-32bitUpgrade python-develUpgrade libpython2_6-1_0Upgrade pythonUpgrade python-idleUpgrade libpython2_6-1_0-x86Upgrade python-baseUpgrade libpython2_6-1_0-32bitUpgrade python-base-32bitUpgrade python-base-x86Upgrade python-docUpgrade python-demoUpgrade libpython2_7-1_0-32bitUpgrade python-doc-pdf | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade python2.7-minimalUpgrade python2.6-minimalUpgrade python2.6Upgrade python3.3-minimalUpgrade python3.2-minimalUpgrade python2.7Upgrade python3.3Upgrade python3.2 | Nov 8, 2024 | Mar 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub