CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python2Upgrade python | Feb 26, 2018 | Nov 17, 2017 |
| Amazon_linux | — | Upgrade python27Upgrade python34Upgrade python35 | Feb 1, 2018 | Nov 17, 2017 |
| Debian | — | Upgrade python2.6Upgrade python2.7 | Sep 30, 2018 | Nov 17, 2017 |
| Freebsd | — | Upgrade python35Upgrade python34 | Feb 12, 2018 | Feb 11, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/python. | May 3, 2018 | Nov 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-libsUpgrade pythonUpgrade python-devel | Jan 18, 2018 | Nov 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-devel | Jan 18, 2018 | Nov 17, 2017 |
| Oracle Solaris | — | Upgrade runtime/python-34 to version 3.4.8-0.175.3.35.0.1.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.8-0.175.3.35.0.1.0 on Solaris 11.3Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.31.0.6.0 on Solaris 11.3Upgrade runtime/python-27 to version 2.7.9-0.175.3.31.0.6.0 on Solaris 11.3Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.31.0.6.0 on Solaris 11.3 | May 16, 2018 | Nov 17, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 13, 2017 |
| Suse | — | Upgrade python-develUpgrade libpython2_6-1_0-32bitUpgrade python3-baseUpgrade python-xmlUpgrade python-gdbmUpgrade libpython2_6-1_0Upgrade libpython2_7-1_0Upgrade python-idleUpgrade python-32bitUpgrade python-demoUpgrade python-base-32bitUpgrade python-base-x86Upgrade python-doc-pdfUpgrade python3-cursesUpgrade python3Upgrade python3-develUpgrade libpython2_7-1_0-32bitUpgrade python-x86Upgrade libpython3_4m1_0-32bitUpgrade python-cursesUpgrade python-tkUpgrade pythonUpgrade libpython3_4m1_0Upgrade python3-tkUpgrade libpython2_6-1_0-x86Upgrade python3-dbmUpgrade python-docUpgrade python-base | Mar 23, 2018 | Nov 17, 2017 |
| Ubuntu | — | Upgrade python2.7-minimalUpgrade python3.5-minimalUpgrade python2.7Upgrade python3.4-minimalUpgrade python3.5Upgrade python3.4 | Nov 28, 2017 | Nov 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub