CVE-2014-4616

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-129

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.python.org/issue21529Issue Tracking, Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.htmlMailing List, Third Party Advisory
http://openwall.com/lists/oss-security/2014/06/24/7Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1064.htmlThird Party Advisory
http://www.securityfocus.com/bid/68119Third Party Advisory, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395Issue Tracking, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1112285Issue Tracking, Patch, Third Party Advisory
https://hackerone.com/reports/12297Exploit, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201503-10Patch, Third Party Advisory, VDB Entry
http://bugs.python.org/issue21529Issue Tracking, Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2014-07/msg00015.htmlMailing List, Third Party Advisory
http://openwall.com/lists/oss-security/2014/06/24/7Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1064.htmlThird Party Advisory
http://www.securityfocus.com/bid/68119Third Party Advisory, VDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752395Issue Tracking, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1112285Issue Tracking, Patch, Third Party Advisory
https://hackerone.com/reports/12297Exploit, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201503-10Patch, Third Party Advisory, VDB Entry

Timeline

Published: Aug 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-46175.0The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a CVE-2014-46188.5EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-crea CVE-2014-46199.3EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Ident CVE-2014-46202.1The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext Recov CVE-2014-46218.5EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of CVE-2014-46227.1EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of CVE-2014-46234.3EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0 CVE-2014-46245.0EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls CVE-2014-46269.0EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users t CVE-2014-46278.8SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to execute arbitrary SQL co CVE-2014-46284.3Cross-site scripting (XSS) vulnerability in EMC Isilon InsightIQ 2.x and 3.x before 3.1 allows remote attackers to inject arbitrary web scri CVE-2014-46299.0EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary