A vulnerability was reported [1] in Python's socket module, due to a boundary error within the sock_recvfrom_into() function, which could be exploited to cause a buffer overflow. This could be used to crash a Python application that uses the socket.recvfrom_info() function or, possibly, execute arbitrary code with the permissions of the user running vulnerable Python code. This vulnerable function, socket.recvfrom_into(), was introduced in Python 2.5. Earlier versions are not affected by this flaw. This is fixed in upstream branches for version 2.7 [2] and version 3.3 [3]. [1] http://bugs.python.org/issue20246 [2] http://hg.python.org/cpython/rev/87673659d8f7 [3] http://hg.python.org/cpython/rev/7f176a45211f/
Created python tracking bugs for this issue: Affects: fedora-all [bug 1062375]
Created python3 tracking bugs for this issue: Affects: fedora-all [bug 1062374]
MITRE assigned CVE-2014-1912 to this issue: http://seclists.org/oss-sec/2014/q1/336
python-2.7.5-10.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
python3-3.3.2-9.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
Statement: This issue did not affect the versions of python as shipped with Red Hat Enterprise Linux 5 as they did not include the vulnerable socket.recvfrom_into() function. This issue was also corrected in the version of python shipped with Red Hat Enterprise Linux 7.0 prior to release. The Red Hat Security Response Team has rated this issue as having Moderate security impact. A future update may address this issue in Red Hat Software Collections. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
This was fixed upstream in Python 3.3.4 and 2.7.7: https://docs.python.org/3.3/whatsnew/changelog.html#python-3-3-4 https://hg.python.org/cpython/raw-file/f89216059edf/Misc/NEWS
Created python26 tracking bugs for this issue: Affects: epel-5 [bug 1157721]
This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat Software Collections for Red Hat Enterprise Linux 6 Red Hat Software Collections for Red Hat Enterprise Linux 6.5 EUS Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUS Via RHSA-2015:1064 https://rhn.redhat.com/errata/RHSA-2015-1064.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2015:1330 https://rhn.redhat.com/errata/RHSA-2015-1330.html