{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-06-24T00:00:00", "descriptions": [{"lang": "en", "value": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-01-04T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "[oss-security] 20140925 Re: CVE Request: Python 2.7", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2014/09/25/47"}, {"name": "FEDORA-2014-11559", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html"}, {"name": "python-bufferobject-overflow(96193)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96193"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, {"name": "[oss-security] 20140923 CVE Request: Python 2.7", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2014/09/23/5"}, {"name": "RHSA-2015:1064", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1064.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.python.org/issue21831"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"name": "GLSA-201503-10", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201503-10"}, {"name": "APPLE-SA-2015-08-13-2", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"}, {"name": "RHSA-2015:1330", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1330.html"}, {"name": "openSUSE-SU-2014:1292", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT205031"}, {"name": "70089", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/70089"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-7185", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20140925 Re: CVE Request: Python 2.7", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2014/09/25/47"}, {"name": "FEDORA-2014-11559", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html"}, {"name": "python-bufferobject-overflow(96193)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96193"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, {"name": "[oss-security] 20140923 CVE Request: Python 2.7", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2014/09/23/5"}, {"name": "RHSA-2015:1064", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-1064.html"}, {"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"name": "http://bugs.python.org/issue21831", "refsource": "CONFIRM", "url": "http://bugs.python.org/issue21831"}, {"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"name": "GLSA-201503-10", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201503-10"}, {"name": "APPLE-SA-2015-08-13-2", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"}, {"name": "RHSA-2015:1330", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-1330.html"}, {"name": "openSUSE-SU-2014:1292", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html"}, {"name": "https://support.apple.com/kb/HT205031", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT205031"}, {"name": "70089", "refsource": "BID", "url": "http://www.securityfocus.com/bid/70089"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T12:40:19.120Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20140925 Re: CVE Request: Python 2.7", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2014/09/25/47"}, {"name": "FEDORA-2014-11559", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html"}, {"name": "python-bufferobject-overflow(96193)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96193"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, {"name": "[oss-security] 20140923 CVE Request: Python 2.7", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2014/09/23/5"}, {"name": "RHSA-2015:1064", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1064.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.python.org/issue21831"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"name": "GLSA-201503-10", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201503-10"}, {"name": "APPLE-SA-2015-08-13-2", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"}, {"name": "RHSA-2015:1330", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1330.html"}, {"name": "openSUSE-SU-2014:1292", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.apple.com/kb/HT205031"}, {"name": "70089", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/70089"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-7185", "datePublished": "2014-10-08T17:00:00", "dateReserved": "2014-09-25T00:00:00", "dateUpdated": "2024-08-06T12:40:19.120Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "matchCriteriaId": "06BD335F-1DEB-47CD-9BDC-C37440E11CD8", "versionEndIncluding": "2.7.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "8CE2063E-5B74-4731-885F-80D2D7B15604", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "FC647F82-9679-4B26-AFF1-1B43B0AF18B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "046BCC55-F166-4C31-AB2B-815A0DFA2BEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "6A3CABCB-9FA8-4B13-8CF1-AA89B9E9B7E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "41925551-AC82-4EEA-836F-56E280114765", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "A213A57A-85BB-4B12-B394-3FF5459797EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "76D82E41-8B87-4D6E-9E59-C12E37E30965", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.1150:*:*:*:*:*:*:*", "matchCriteriaId": "0D00809F-8D47-428E-9347-2BF36A61901A", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.1150:*:*:*:*:*:x64:*", "matchCriteriaId": "14EF3E9D-8F0D-40C4-A171-866D091CB531", "vulnerable": true}, {"criteria": "cpe:2.3:a:python:python:2.7.2150:*:*:*:*:*:*:*", "matchCriteriaId": "CC94B908-E405-4BD2-BE36-2BB90238F7EE", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "7883E465-932D-4C11-AA54-97E44181F906", "versionEndIncluding": "10.10.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function."}, {"lang": "es", "value": "Desbordamiento de enteros en bufferobject.c en Python anterior a 2.7.8 permite a atacantes dependientes de contexto obtener informaci\u00f3n sensible de la memoria de procesos a trav\u00e9s de un tama\u00f1o y desplazamiento grande en una funci\u00f3n 'buffer'."}], "id": "CVE-2014-7185", "lastModified": "2024-11-21T02:16:28.973", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-10-08T17:55:05.187", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://bugs.python.org/issue21831"}, {"source": "cve@mitre.org", "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"}, {"source": "cve@mitre.org", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html"}, {"source": "cve@mitre.org", "url": "http://rhn.redhat.com/errata/RHSA-2015-1064.html"}, {"source": "cve@mitre.org", "url": "http://rhn.redhat.com/errata/RHSA-2015-1330.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.openwall.com/lists/oss-security/2014/09/23/5"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2014/09/25/47"}, {"source": "cve@mitre.org", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"source": "cve@mitre.org", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/70089"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96193"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201503-10"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://support.apple.com/kb/HT205031"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://bugs.python.org/issue21831"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2015-1064.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://rhn.redhat.com/errata/RHSA-2015-1330.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.openwall.com/lists/oss-security/2014/09/23/5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2014/09/25/47"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/70089"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96193"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201503-10"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.apple.com/kb/HT205031"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2015:1330", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "python-0:2.6.6-64.el6", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2015-07-20T00:00:00Z"}, {"advisory": "RHSA-2015:2101", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "python-0:2.7.5-34.el7", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2015-11-19T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-0:1.1-17.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-0:2.7.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-pip-0:1.5.6-5.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-setuptools-0:0.9.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-simplejson-0:3.2.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-wheel-0:0.24.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-0:1.1-17.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-0:2.7.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-pip-0:1.5.6-5.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-setuptools-0:0.9.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-simplejson-0:3.2.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-wheel-0:0.24.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-0:1.1-17.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-0:2.7.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-pip-0:1.5.6-5.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-setuptools-0:0.9.8-3.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-simplejson-0:3.2.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el6", "package": "python27-python-wheel-0:0.24.0-2.el6", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-0:1.1-20.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-python-0:2.7.8-3.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-python-pip-0:1.5.6-5.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-python-setuptools-0:0.9.8-5.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-python-simplejson-0:3.2.0-3.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}, {"advisory": "RHSA-2015:1064", "cpe": "cpe:/a:redhat:rhel_software_collections:2::el7", "package": "python27-python-wheel-0:0.24.0-2.el7", "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "release_date": "2015-06-04T00:00:00Z"}], "bugzilla": {"description": "python: buffer() integer overflow leading to out of bounds read", "id": "1146026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1146026"}, "csaw": false, "cvss": {"cvss_base_score": "4.0", "cvss_scoring_vector": "AV:N/AC:H/Au:N/C:P/I:N/A:P", "status": "verified"}, "cwe": "CWE-190->CWE-125->CWE-200", "details": ["Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.", "An integer overflow flaw was found in the way the buffer() function handled its offset and size arguments. An attacker able to control those arguments could use this flaw to disclose portions of the application memory or cause it to crash."], "name": "CVE-2014-7185", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:4", "fix_state": "Will not fix", "package_name": "python", "product_name": "Red Hat Enterprise Linux 4"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "python", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:1", "fix_state": "Affected", "package_name": "python27-python", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:1", "fix_state": "Not affected", "package_name": "python33-python", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Not affected", "package_name": "rh-python34-python", "product_name": "Red Hat Software Collections"}], "public_date": "2014-06-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2014-7185\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-7185"], "statement": "This issue affects the versions of python as shipped with Red Hat Enterprise Linux 7. A future update may address this issue.\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "threat_severity": "Low", "upstream_fix": "python 2.7.8"}