{"id":"CVE-2014-7185","aliases":["AZL-109602","DEBIAN-CVE-2014-7185","EUVD-2014-7062","GHSA-4p82-prjq-g7wr","MGASA-2014-0399","PSF-2014-6","RHSA-2015:1064","RHSA-2015:1330","RHSA-2015:2101","SUSE-SU-2015:1344-1","SUSE-SU-2020:0234-1","UBUNTU-CVE-2014-7185","USN-2653-1","openSUSE-SU-2024:10536-1","openSUSE-SU-2024:11202-1"],"status":"published","title":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05122,"percentile":0.92441,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2014-10-07T09:22:51Z","modified":"2026-10-27T05:36:16Z","fixes":[{"ecosystem":"Debian:11","package":"python2.7","fixed_in":["2.7.8-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python","fixed_in":["2.7.6-1.3.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"python","fixed_in":["2.7.6-1.3.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"python-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.3.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.3.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-64.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1.4"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-8.1"}]}],"bundled":40}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"python","product":"python"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2014/09/25/47","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/96193","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146026","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence","report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/09/23/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1064.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://bugs.python.org/issue21831","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201503-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1330.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT205031","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/70089","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7185","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-4p82-prjq-g7wr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7185","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0399.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14177","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2014/09/25/47","tags":["web"]},{"url":"https://bugs.python.org/issue21831","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1064","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1167912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1170993","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1064.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1753","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1753","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1912","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4616","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7185","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1330","tags":["advisory"]},{"url":"https://access.redhat.com/articles/1495363","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=794632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1073165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223037","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1330.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2101","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2039753","tags":["article"]},{"url":"https://www.python.org/dev/peps/pep-0466/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1173041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1237107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259421","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2101.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151344-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/898572","tags":["report"]},{"url":"https://bugzilla.suse.com/901715","tags":["report"]},{"url":"https://bugzilla.suse.com/924312","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7185","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027282","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1068664","tags":["report"]},{"url":"https://bugzilla.suse.com/1073269","tags":["report"]},{"url":"https://bugzilla.suse.com/1073748","tags":["report"]},{"url":"https://bugzilla.suse.com/1078326","tags":["report"]},{"url":"https://bugzilla.suse.com/1078485","tags":["report"]},{"url":"https://bugzilla.suse.com/1079300","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1083507","tags":["report"]},{"url":"https://bugzilla.suse.com/1084650","tags":["report"]},{"url":"https://bugzilla.suse.com/1086001","tags":["report"]},{"url":"https://bugzilla.suse.com/1088004","tags":["report"]},{"url":"https://bugzilla.suse.com/1088009","tags":["report"]},{"url":"https://bugzilla.suse.com/1109847","tags":["report"]},{"url":"https://bugzilla.suse.com/1111793","tags":["report"]},{"url":"https://bugzilla.suse.com/1113755","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1129346","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1130847","tags":["report"]},{"url":"https://bugzilla.suse.com/1138459","tags":["report"]},{"url":"https://bugzilla.suse.com/1141853","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1149955","tags":["report"]},{"url":"https://bugzilla.suse.com/1153238","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1159035","tags":["report"]},{"url":"https://bugzilla.suse.com/214983","tags":["report"]},{"url":"https://bugzilla.suse.com/298378","tags":["report"]},{"url":"https://bugzilla.suse.com/346490","tags":["report"]},{"url":"https://bugzilla.suse.com/367853","tags":["report"]},{"url":"https://bugzilla.suse.com/379534","tags":["report"]},{"url":"https://bugzilla.suse.com/380942","tags":["report"]},{"url":"https://bugzilla.suse.com/399190","tags":["report"]},{"url":"https://bugzilla.suse.com/406051","tags":["report"]},{"url":"https://bugzilla.suse.com/425138","tags":["report"]},{"url":"https://bugzilla.suse.com/426563","tags":["report"]},{"url":"https://bugzilla.suse.com/430761","tags":["report"]},{"url":"https://bugzilla.suse.com/432677","tags":["report"]},{"url":"https://bugzilla.suse.com/436966","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/441088","tags":["report"]},{"url":"https://bugzilla.suse.com/462375","tags":["report"]},{"url":"https://bugzilla.suse.com/525295","tags":["report"]},{"url":"https://bugzilla.suse.com/534721","tags":["report"]},{"url":"https://bugzilla.suse.com/551715","tags":["report"]},{"url":"https://bugzilla.suse.com/572673","tags":["report"]},{"url":"https://bugzilla.suse.com/577032","tags":["report"]},{"url":"https://bugzilla.suse.com/581765","tags":["report"]},{"url":"https://bugzilla.suse.com/603255","tags":["report"]},{"url":"https://bugzilla.suse.com/617751","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/638233","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/682554","tags":["report"]},{"url":"https://bugzilla.suse.com/697251","tags":["report"]},{"url":"https://bugzilla.suse.com/707667","tags":["report"]},{"url":"https://bugzilla.suse.com/718009","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/747794","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/766778","tags":["report"]},{"url":"https://bugzilla.suse.com/794139","tags":["report"]},{"url":"https://bugzilla.suse.com/804978","tags":["report"]},{"url":"https://bugzilla.suse.com/827982","tags":["report"]},{"url":"https://bugzilla.suse.com/831442","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/836739","tags":["report"]},{"url":"https://bugzilla.suse.com/856835","tags":["report"]},{"url":"https://bugzilla.suse.com/856836","tags":["report"]},{"url":"https://bugzilla.suse.com/857470","tags":["report"]},{"url":"https://bugzilla.suse.com/863741","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/945401","tags":["report"]},{"url":"https://bugzilla.suse.com/964182","tags":["report"]},{"url":"https://bugzilla.suse.com/984751","tags":["report"]},{"url":"https://bugzilla.suse.com/985177","tags":["report"]},{"url":"https://bugzilla.suse.com/985348","tags":["report"]},{"url":"https://bugzilla.suse.com/989523","tags":["report"]},{"url":"https://bugzilla.suse.com/997436","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9948","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-7185","tags":["report"]},{"url":"http://seclists.org/oss-sec/2014/q3/638","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2653-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-1752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-1753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4650","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3737","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-7185","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:00:00Z","modified":"2024-08-06T12:40:19.12Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-7062","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:00:00Z","modified":"2024-08-06T12:40:19Z","updated_at":"2026-11-03T01:56:55.992719Z"}],"ghsa":[{"id":"GHSA-4p82-prjq-g7wr","title":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2022-05-13T01:31:01Z","modified":"2023-02-01T05:08:03Z","updated_at":"2026-11-02T14:50:40.02829Z"}],"nvd":[{"id":"CVE-2014-7185","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:55:05.187Z","modified":"2026-06-17T00:14:30.487Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:56.266125Z"}],"osv":[{"id":"AZL-109602","title":"CVE-2014-7185 affecting package python-py 1.11.0-1","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:55:05Z","modified":"2026-10-27T05:36:16Z","updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"CVE-2014-7185","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:55:05Z","modified":"2026-04-16T06:17:53.080743803Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-7185","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:55:05.187Z","modified":"2026-08-27T12:47:32.115179883Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0399","title":"Updated python packages fix CVE-2014-7185","description":"Updated python packages fix security vulnerability:\n\nPython before 2.7.8 is vulnerable to an integer overflow in the buffer type\n(CVE-2014-7185).\n","status":"published","published":"2014-10-07T09:22:51Z","modified":"2026-04-16T06:24:40.403089382Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10536-1","title":"libpython2_7-1_0-2.7.12-1.4 on GA media","description":"These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:14.818245Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11202-1","title":"python-2.7.18-8.1 on GA media","description":"These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:22.875083Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"PSF-2014-6","title":"buffer() integer overflows","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T17:00:00Z","modified":"2023-11-08T03:57:44.372417Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHSA-2015:1064","title":"Red Hat Security Advisory: python27 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:22:24Z","modified":"2026-08-05T10:03:16Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1330","title":"Red Hat Security Advisory: python security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:22:57Z","modified":"2026-08-05T10:03:18Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2101","title":"Red Hat Security Advisory: python security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:23:55Z","modified":"2026-08-05T10:03:23Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1344-1","title":"Security update for python","description":"This update to python 2.7.9 fixes the following issues:\n* python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64\n\nFrom the version update to 2.7.9:\n  * contains full backport of ssl module from Python 3.4 (PEP466)\n  * HTTPS certificate validation enabled by default (PEP476)\n  * SSLv3 disabled by default (bnc#901715)\n  * backported ensurepip module (PEP477)\n  * fixes several missing CVEs from last release: CVE-2013-1752, CVE-2013-1753\n  * dropped upstreamed patches: python-2.7.6-poplib.patch,\n    smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch\n  * dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it\n    with ssl module from Python 3\n  * libffi was upgraded upstream, seems to contain our changes,\n    so dropping libffi-ppc64le.diff as well\n  * python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional\n    'import ssl' from test_urllib2_localnet that caused it to fail without ssl\n\n  * skip test_thread in qemu_linux_user mode \n\nFrom the version update to 2.7.8:\n  * fixes CVE-2014-4650 directory traversal in CGIHTTPServer\n  * fixes CVE-2014-7185 (bnc#898572) potential buffer overflow in buffer()\n\nAlso the DH parameters were increased to 2048 bit to fix logjam security issue (bsc#935856)\n","status":"published","published":"2015-06-30T13:56:32Z","modified":"2026-02-04T03:45:47.827952Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2020:0234-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\nUpdated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).\n","status":"published","published":"2020-01-24T15:34:18Z","modified":"2025-05-02T04:03:47.841058Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"UBUNTU-CVE-2014-7185","description":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","status":"published","published":"2014-10-08T00:00:00Z","modified":"2026-04-22T09:49:19.089521Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2653-1","title":"python2.7, python3.2, python3.4 vulnerabilities","description":"It was discovered that multiple Python protocol libraries incorrectly\nlimited certain data when connecting to servers. A malicious ftp, http,\nimap, nntp, pop or smtp server could use this issue to cause a denial of\nservice. (CVE-2013-1752)\n\nIt was discovered that the Python xmlrpc library did not limit unpacking\ngzip-compressed HTTP bodies. A malicious server could use this issue to\ncause a denial of service. (CVE-2013-1753)\n\nIt was discovered that the Python json module incorrectly handled a certain\nargument. An attacker could possibly use this issue to read arbitrary\nmemory and expose sensitive information. This issue only affected Ubuntu\n12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4616)\n\nIt was discovered that the Python CGIHTTPServer incorrectly handled\nURL-encoded path separators in URLs. A remote attacker could use this issue\nto expose sensitive information, or possibly execute arbitrary code. This\nissue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4650)\n\nIt was discovered that Python incorrectly handled sizes and offsets in\nbuffer functions. An attacker could possibly use this issue to read\narbitrary memory and obtain sensitive information. This issue only affected\nUbuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-7185)\n","status":"published","published":"2015-06-25T11:58:16Z","modified":"2026-04-22T09:13:28.041902Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}