CVE-2014-7185: Integer Overflow
Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
Other sources
It was reported [1] that Python 2.7.8 fixes a potential wraparound in buffer() with possible CWE-200 implications.
While the CVE request is forPython 2.7, reporter also indicated that earlier versions (1.6.1 through 2.6.9) were also affected.
PoC: --- overflow.py --- import sys a = bytearray('here be dragons') b = buffer(a, sys.maxsize, sys.maxsize) print b[:8192] -------------------
Upstream fix is in [2].
[1]: http://seclists.org/oss-sec/2014/q3/638 [2]: https://hg.python.org/cpython/diff/8d963c7db507/Objects/bufferobject.c
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7185?
CVE-2014-7185 is considered to have a medium severity due to the potential for sensitive information disclosure.
Which versions of Python are affected by CVE-2014-7185?
CVE-2014-7185 affects Python versions prior to 2.7.8.
How do I fix CVE-2014-7185?
To fix CVE-2014-7185, upgrade Python to version 2.7.8 or higher.
What type of attack does CVE-2014-7185 allow?
CVE-2014-7185 allows context-dependent attackers to exploit an integer overflow for information disclosure.
Is there a workaround for CVE-2014-7185 if I cannot upgrade?
There is no known workaround for CVE-2014-7185; upgrading to a fixed version is recommended.