The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python2Upgrade python | Oct 1, 2024 | Aug 24, 2017 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Aug 24, 2017 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Aug 24, 2017 |
| Oracle_linux | — | Upgrade tkinterUpgrade python-testUpgrade python27-tkinterUpgrade python27-python-setuptoolsUpgrade python27-python-debugUpgrade python27-python-simplejsonUpgrade python27-python-pipUpgrade python-develUpgrade python27-python-develUpgrade python-libsUpgrade python27Upgrade python27-python-testUpgrade python-toolsUpgrade python27-scldevelUpgrade python27-pythonUpgrade python27-python-libsUpgrade python27-runtimeUpgrade python-debugUpgrade pythonUpgrade python27-python-wheelUpgrade python27-python-tools | Oct 16, 2024 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2017 |
| Suse | — | Upgrade python-tkUpgrade pythonUpgrade python3-dbmUpgrade python-gdbmUpgrade libpython3_3m1_0-debuginfo-32bitUpgrade python-32bitUpgrade python3-base-debuginfoUpgrade python-doc-pdfUpgrade python3-develUpgrade python3-debuginfo-32bitUpgrade python3-idleUpgrade libpython3_3m1_0-32bitUpgrade python-docUpgrade python3-baseUpgrade python3-curses-debuginfoUpgrade python-debugsourceUpgrade libpython2_7-1_0-32bitUpgrade python3-debuginfoUpgrade python-idleUpgrade python3-dbm-debuginfoUpgrade python-tk-debuginfoUpgrade python-gdbm-debuginfoUpgrade libpython3_3m1_0-debuginfoUpgrade python3-devel-debuginfoUpgrade python-base-debugsourceUpgrade python-baseUpgrade libpython2_7-1_0-debuginfoUpgrade libpython2_7-1_0-debuginfo-32bitUpgrade libpython2_7-1_0Upgrade python-xml-debuginfoUpgrade python3-32bitUpgrade libpython3_3m1_0Upgrade python3-toolsUpgrade python3-doc-pdfUpgrade python3-base-debugsourceUpgrade python3-debugsourceUpgrade python-debuginfoUpgrade python3-tk-debuginfoUpgrade python-curses-debuginfoUpgrade python3-tkUpgrade python-debuginfo-32bitUpgrade python-demoUpgrade python3-testsuite-debuginfoUpgrade python-base-debuginfo-32bitUpgrade python3-base-32bitUpgrade python3-base-debuginfo-32bitUpgrade python3-testsuiteUpgrade python3-docUpgrade python-cursesUpgrade python-xmlUpgrade python3Upgrade python-base-32bitUpgrade python3-cursesUpgrade python-develUpgrade python-base-debuginfo | Dec 18, 2015 | Jul 12, 2014 |
| Ubuntu | — | Upgrade python3.2Upgrade python3.4-minimalUpgrade python3.4Upgrade python2.7Upgrade python3.2-minimalUpgrade python2.7-minimal | Nov 8, 2024 | Aug 24, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub