{"schema_version":"1.7.3","id":"PSF-2014-6","published":"2014-10-08T17:00:00Z","modified":"2023-11-08T03:57:44.372417Z","aliases":["CVE-2014-7185"],"summary":"buffer() integer overflows","details":"Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a \"buffer\" function.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"0"},{"fixed":"550b945fd66f1c6837a53fbf29dc8e524297b8c3"}]}],"database_specific":{"source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2014-6.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"309977180046877818326265354308150323506","length":1576},"id":"PSF-2014-6-49d160cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/python/cpython/commit/550b945fd66f1c6837a53fbf29dc8e524297b8c3","target":{"file":"Objects/bufferobject.c","function":"get_buf"}},{"deprecated":false,"digest":{"line_hashes":["150755083869012394236169596343615360559","333759549387786561734708116223330721126","245122130842657787089162520002778066703","223354793685248631443489536811747358716","216301770560921474631172421429308174413"],"threshold":0.9},"id":"PSF-2014-6-89cf1351","signature_type":"Line","signature_version":"v1","source":"https://github.com/python/cpython/commit/550b945fd66f1c6837a53fbf29dc8e524297b8c3","target":{"file":"Objects/bufferobject.c"}}]}}],"references":[{"type":"REPORT","url":"https://bugs.python.org/issue21831"}],"database_specific":{"cwe_ids":[]}}