UBUNTU-CVE-2014-7185

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

References

Affected packages

Ubuntu:14.04:LTS / python2.7

Package

Name: python2.7
Purl: pkg:deb/ubuntu/python2.7@2.7.6-8ubuntu0.2?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.6-8ubuntu0.2

Affected versions

2.*

2.7.5-8ubuntu3

2.7.5-8ubuntu4

2.7.6-2

2.7.6-2ubuntu1

2.7.6-3

2.7.6-3ubuntu1

2.7.6-4

2.7.6-4ubuntu1

2.7.6-5

2.7.6-7

2.7.6-8

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "idle-python2.7",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "libpython2.7",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "libpython2.7-dev",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "libpython2.7-minimal",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "libpython2.7-stdlib",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "libpython2.7-testsuite",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "python2.7",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "python2.7-dev",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "python2.7-examples",
            "binary_version": "2.7.6-8ubuntu0.2"
        },
        {
            "binary_name": "python2.7-minimal",
            "binary_version": "2.7.6-8ubuntu0.2"
        }
    ],
    "availability": "No subscription required"
}