Buffer overflow in Python - CVE-2014-4616
Published: August 24, 2017 / Updated: July 28, 2020
Vulnerability identifier: #VU32042
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-4616
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
Affected software
Python
Gentoo Linux
Amazon Linux AMI
Fedora
python (Alpine package)
python2 (Alpine package)
dev-lang/python
python3
python-simplejson
Gentoo Linux
Amazon Linux AMI
Fedora
python (Alpine package)
python2 (Alpine package)
dev-lang/python
python3
python-simplejson
How to mitigate CVE-2014-4616
Install update from vendor's website.
Python - update to 3.5.0
python (Alpine package) - update to 2.7.14-r0
python2 (Alpine package) - update to 2.7.14-r0
dev-lang/python - update to 3.3.5-r1
python3 - update to 3.4.1-16.fc21
python-simplejson - update to 3.5.3-1.el7
python (Alpine package) - update to 2.7.14-r0
python2 (Alpine package) - update to 2.7.14-r0
dev-lang/python - update to 3.3.5-r1
python3 - update to 3.4.1-16.fc21
python-simplejson - update to 3.5.3-1.el7
External References
- http://bugs.python.org/issue21529
- http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html
- http://openwall.com/lists/oss-security/2014/06/24/7
- http://rhn.redhat.com/errata/RHSA-2015-1064.html
- http://www.securityfocus.com/bid/68119
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395
- https://bugzilla.redhat.com/show_bug.cgi?id=1112285
- https://hackerone.com/reports/12297
- https://security.gentoo.org/glsa/201503-10