CVE-2014-1912

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

28.11% chance of exploitation in the next 30 days, 98th percentile

Published

2014-02-28

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/31875

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31875

Security advisories

• https://support.apple.com/kb/HT205031
• http://bugs.python.org/issue20246
• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
• http://www.securityfocus.com/bid/65379
• http://www.ubuntu.com/usn/USN-2125-1

References

• CVE Record
• NVD entry