[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201402121625.s1CGPoPj013740@linus.mitre.org>
Date: Wed, 12 Feb 2014 11:25:50 -0500 (EST)
From: cve-assign@...re.org
To: geissert@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request? buffer overflow in socket.recvfrom_into
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> A bug has been reported in python, where socket.recvfrom_into "fails to
> check that the supplied buffer object is big enough for the requested read
> and so will happily write off the end". Ryan Smith-Roberts goes on to say
> "while very highly unlikely it's technically remotely exploitable".
> http://bugs.python.org/issue20246
Use CVE-2014-1912.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJS+6AqAAoJEKllVAevmvmsiYAIAId5xbsDyWv0ePAFbmlhaWRn
sswPyMCmN1hDNi+LOL0RoArS2PvgLRYr89ye9oYLAmAvwObcfq2hko2k1mgKsMwM
BcZs/xjEKQMQy57PdSoAf3NSYvY7QLwxRobtY0UqTUMHERVtgSsxNGp7XqBpZLHu
wbY2e5sJf0vIPKuIvUkgONhouE8fzVeaolHCkKGKvAvlseuohn08NLNjNx9r5gWD
SN0tmqckRgLhV5PO6RLjv+6Jm5aaTxM7v6fhvix8oYGuMA8kY8pj9j6v2KTOGrKZ
AKlQE16EdUCthDV87cM9Kyynqf4jwlc1thoJfv6rcKXv9/V2LNLGy8RL86YtjWU=
=8tWP
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
