{"id":"CVE-2014-4616","aliases":["ALPINE-CVE-2014-4616","DEBIAN-CVE-2014-4616","EUVD-2022-3310","GHSA-9772-cwx9-r4cj","MGASA-2014-0285","MGASA-2014-0286","PSF-2017-1","PYSEC-2026-921","RHEA-2014:1175","RHSA-2015:1064","RHSA-2015:2101","UBUNTU-CVE-2014-4616","USN-2653-1"],"status":"published","title":"simplejson before 2.6.1 vulnerable to array index error","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07845,"percentile":0.94722,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-129"],"published":"2014-06-26T00:00:00Z","modified":"2026-10-23T15:17:40Z","fixes":[{"ecosystem":"PyPI","package":"simplejson","fixed_in":["2.6.1"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.4","package":"python","fixed_in":["2.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"python2","fixed_in":["2.7.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"python2","fixed_in":["2.7.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python2.7","fixed_in":["2.7.7-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-simplejson","fixed_in":["2.6.0-2.1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"python-simplejson","fixed_in":["3.3.0-3.1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","fixed_in":["3.4.0-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"python2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.7-r0"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.7-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1"}]}],"versions":["1.1","1.3","1.4","1.5","1.6","1.7","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8","1.8.1","1.9","1.9.1","1.9.2","1.9.3","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.0rc3","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.2.0","2.2.1","2.3.0","2.3.1","2.3.2","2.3.3","2.4.0","2.5.0","2.5.1","2.5.2","2.6.0"]},{"source":"osv","ecosystem":"Mageia:3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.2.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-4.9.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.2.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-13.4.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-2.1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-3.1.mga4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1"}]}],"versions":["1.1","1.3","1.4","1.5","1.6","1.7","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.8","1.8.1","1.9","1.9.1","1.9.2","1.9.3","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.0rc3","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.2.0","2.2.1","2.3.0","2.3.1","2.3.2","2.3.3","2.4.0","2.5.0","2.5.1","2.5.2","2.6.0"]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"libmongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"libmongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.9-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-30.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-30.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.44-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-9.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"v8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.14.5.10-11.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.2-1.el6"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-6.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-6.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0.30-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.4-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-2.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-16.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-3.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-16.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.3-3.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el6","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-4.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el6","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-4.el6sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.0::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-anyjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.3-5.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:satellite:6.0::el7","package":"python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-1.el7sat"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1"],"bundled":5}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"opensuse_project","product":"opensuse"},{"vendor":"python","product":"python"},{"vendor":"simplejson_project","product":"simplejson"}],"references":[{"url":"https://hackerone.com/reports/12297","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","advisory","evidence","fix","web"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","advisory","article","report","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1064.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/68119","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"https://security.gentoo.org/glsa/201503-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Patch","Third Party Advisory","VDB Entry","advisory","fix","web"]},{"url":"http://openwall.com/lists/oss-security/2014/06/24/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://bugs.python.org/issue21529","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","advisory","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112285","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4616","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9772-cwx9-r4cj","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2014-4616","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-4616","tags":["advisory"]},{"url":"https://github.com/simplejson/simplejson","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2014-0285.html","tags":["advisory"]},{"url":"http://bugs.python.org/issue21766","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2014/06/26/3","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-June/134903.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13588","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0286.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13601","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-June/134761.html","tags":["web"]},{"url":"https://access.redhat.com/security/cve/cve-2014-4616","tags":["advisory"]},{"url":"https://bugs.python.org/issue21529","tags":["report"]},{"url":"https://pypi.org/project/simplejson","tags":["package"]},{"url":"https://access.redhat.com/errata/RHEA-2014:1175","tags":["advisory"]},{"url":"https://access.redhat.com/site/documentation/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131602","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhea-2014_1175.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1049748","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6619","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=963568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=968166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=991116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=991318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=997639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1013076","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1039889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1059070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-7440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7440","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1105369","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0007","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092354","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1094642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1099419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1704","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1108745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3531","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4616","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1064","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1167912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1170993","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1064.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1753","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1753","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1912","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7185","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2101","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2039753","tags":["article"]},{"url":"https://www.python.org/dev/peps/pep-0466/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1173041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1237107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259421","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2101.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-4616","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2653-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-1752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-1753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-7185","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:00:00Z","modified":"2024-08-06T11:20:27.021Z","updated_at":"2026-11-02T14:33:45.604635Z"}],"euvd":[{"id":"EUVD-2022-3310","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:00:00Z","modified":"2024-08-06T11:20:27Z","updated_at":"2026-11-03T01:57:05.7284Z"}],"ghsa":[{"id":"GHSA-9772-cwx9-r4cj","title":"simplejson before 2.6.1 vulnerable to array index error","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2022-05-14T02:05:09Z","modified":"2023-01-27T05:02:40Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:36:19.144959Z"}],"nvd":[{"id":"CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:29:00.173Z","modified":"2026-06-17T00:10:20.837Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:02:59.001778Z"}],"osv":[{"id":"ALPINE-CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:29:00.173Z","modified":"2026-10-23T15:17:40.779166085Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:29:00Z","modified":"2026-07-07T11:56:05.213425072Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:29:00.173Z","modified":"2026-08-27T13:01:35.156165064Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"GHSA-9772-cwx9-r4cj","title":"simplejson before 2.6.1 vulnerable to array index error","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2022-05-14T02:05:09Z","modified":"2026-07-07T11:56:05.213425072Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:43.524801Z"},{"id":"PYSEC-2026-921","title":"simplejson before 2.6.1 vulnerable to array index error","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2026-07-06T08:03:23.234177Z","modified":"2026-07-07T11:56:05.213425072Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2014-4616","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2014-06-26T00:00:00Z","modified":"2026-04-22T09:45:53.848173Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"MGASA-2014-0285","title":"Updated python \u0026 python3 packages fix two vulnerabilities","description":"Updated python and python3 packages fix security vulnerabilities:\n\nPython 2 and 3 are susceptible to arbitrary process memory reading by a user\nor adversary due to a bug in the _json module caused by insufficient bounds\nchecking. The bug is caused by allowing the user to supply a negative value\nthat is used as an array index, causing the scanstring function to access\nprocess memory outside of the string it is intended to access\n(CVE-2014-4616).\n\nThe CGIHTTPServer Python module does not properly handle URL-encoded path\nseparators in URLs. This may enable attackers to disclose a CGI script's\nsource code or execute arbitrary scripts in the server's document root\n(CVE-2014-4650).\n","status":"published","published":"2014-07-08T22:35:18Z","modified":"2026-04-16T06:22:53.053507952Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0286","title":"Updated python-simplejson package fixes security vulnerability","description":"Python 2 and 3 are susceptible to arbitrary process memory reading by a user\nor adversary due to a bug in the _json module caused by insufficient bounds\nchecking. The bug is caused by allowing the user to supply a negative value\nthat is used as an array index, causing the scanstring function to access\nprocess memory outside of the string it is intended to access\n(CVE-2014-4616).\n\nThis issue also affected the python-simplejson package, which has been\npatched to fix the bug.\n","status":"published","published":"2014-07-08T22:38:10Z","modified":"2026-04-16T06:26:11.016760709Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"PSF-2017-1","title":"JSONDecoder.raw_decode","description":"Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.","status":"published","published":"2017-08-24T20:00:00Z","modified":"2026-07-07T11:56:05.213425072Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHEA-2014:1175","title":"Red Hat Enhancement Advisory: Release of Satellite 6.0","status":"published","published":"2024-09-15T21:58:55Z","modified":"2026-10-07T10:01:18Z","updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2015:1064","title":"Red Hat Security Advisory: python27 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:22:24Z","modified":"2026-08-05T10:03:16Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2101","title":"Red Hat Security Advisory: python security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:23:55Z","modified":"2026-08-05T10:03:23Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"USN-2653-1","title":"python2.7, python3.2, python3.4 vulnerabilities","description":"It was discovered that multiple Python protocol libraries incorrectly\nlimited certain data when connecting to servers. A malicious ftp, http,\nimap, nntp, pop or smtp server could use this issue to cause a denial of\nservice. (CVE-2013-1752)\n\nIt was discovered that the Python xmlrpc library did not limit unpacking\ngzip-compressed HTTP bodies. A malicious server could use this issue to\ncause a denial of service. (CVE-2013-1753)\n\nIt was discovered that the Python json module incorrectly handled a certain\nargument. An attacker could possibly use this issue to read arbitrary\nmemory and expose sensitive information. This issue only affected Ubuntu\n12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4616)\n\nIt was discovered that the Python CGIHTTPServer incorrectly handled\nURL-encoded path separators in URLs. A remote attacker could use this issue\nto expose sensitive information, or possibly execute arbitrary code. This\nissue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4650)\n\nIt was discovered that Python incorrectly handled sizes and offsets in\nbuffer functions. An attacker could possibly use this issue to read\narbitrary memory and obtain sensitive information. This issue only affected\nUbuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-7185)\n","status":"published","published":"2015-06-25T11:58:16Z","modified":"2026-04-22T09:13:28.041902Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}