Python 'sock_recvfrom_into()' Function Buffer Overflow Vulnerability

Bugtraq ID:	65379
Class:	Boundary Condition Error
CVE:	CVE-2014-1912
Remote:	Yes
Local:	No
Published:	Jan 14 2014 12:00AM
Updated:	Jul 06 2016 12:22PM
Credit:	Ryan Smith-Roberts
Vulnerable:	Ubuntu Ubuntu Linux 10.04 LTS Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Python Software Foundation Python 3.3 Python Software Foundation Python 3.2 Python Software Foundation Python 3.1 Python Software Foundation Python 2.7 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Python 'sock_recvfrom_into()' Function Buffer Overflow Vulnerability

Python is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Python 2.7,3.1,3.2,3.3 are vulnerable.

Python 'sock_recvfrom_into()' Function Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


MandrakeSoft Enterprise Server 5 x86_64

• Mandriva lib64python2.5-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64python2.5-devel-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-base-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-docs-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-apps-2.5.2-5.13mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5

• Mandriva libpython2.5-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpython2.5-devel-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-base-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-docs-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-apps-2.5.2-5.13mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Business Server 1 X86 64

• Mandriva lib64python-devel-2.7.3-4.5.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64python2.7-2.7.3-4.5.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-2.7.3-4.5.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva python-docs-2.7.3-4.5.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-2.7.3-4.5.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva tkinter-apps-2.7.3-4.5.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Python 'sock_recvfrom_into()' Function Buffer Overflow Vulnerability

References:

• buffer overflow in socket.recvfrom_into (rmsr)
  
• Python Homepage (Python Software Foundation)
  
• APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple)
  
• CVE-2014-1912 Buffer Errors vulnerability in Python (Oracle)
  
• isg3T1023300: Security Bulletin: Python vulnerabilities affect IBM SmartCloud En (IBM)
  
• Oracle Linux Bulletin - January 2016 (Oracle)
  
• RHSA-2015:1064-1 (RedHat)