ID:3645 - Exploit for Buffer overflow in Python - CVE-2014-1912

 
Main Vulnerability Database Exploits ID:3645 - Exploit for Buffer overflow in Python - CVE-2014-1912

ID:3645 - Exploit for Buffer overflow in Python - CVE-2014-1912

Published: July 29, 2020


Vulnerability identifier: #VU32578
Vulnerability risk: Medium
CVE-ID: CVE-2014-1912
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
Python

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.


Remediation

Install update from vendor's website.