Description

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

Remediation

References

CVE-2014-4616

Related Vulnerabilities

TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-3662)

Internet Information Services Improper Authentication Vulnerability (CVE-2009-1535)

MySQL CVE-2012-3180 Vulnerability (CVE-2012-3180)

Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777)

PHP Other Vulnerability (CVE-2020-7066)

Severity

Medium

Classification

CVE-2014-4616 CWE-119 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities