Skip to content
COOEY

EXPOSURES › CVE-2017-1000158

CVE-2017-1000158

CRITICAL
DETAIL
SourceNVD · cve Published2017-11-17 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-1000158 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
debian · vendorpython · vendordebian linux · productpython · product
DESCRIPTION

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No public sentiment data available from provided sources.
cooey ↗ neutral +0.00
Neutral; no sentiment expressed.
"CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"
127.0.0.1 ↗ neutral +0.00
Neutral; no sentiment expressed.
"Bridge returned error 0! (20735)"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.