VDB
GCVE-110-MAGEIA-2014-285
GCVE-110-MAGEIA-2014-285
Advisory Published
Updated python and python3 packages fix security vulnerabilities:
Python 2 and 3 are susceptible to arbitrary process memory reading by a user
or adversary due to a bug in the _json module caused by insufficient bounds
checking. The bug is caused by allowing the user to supply a negative value
that is used an an array index, causing the scanstring function to access
process memory outside of the string it is intended to access
(CVE-2014-4616).
The CGIHTTPServer Python module does not properly handle URL-encoded path
separators in URLs. This may enable attackers to disclose a CGI script's
source code or execute arbitrary scripts in the server's document root
(CVE-2014-4650).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Cloudflare | access | — | — |
| Mageia | python3 | 0 (affected), 3.3.0-4.9.mga3 (unaffected) | — |
| Mageia | python3 | 0 (affected), 3.3.2-13.4.mga4 (unaffected) | — |
| Mageia | python | 0 (affected), 2.7.6-1.2.mga4 (unaffected) | — |
| Mageia | python | 0 (affected), 2.7.6-1.2.mga3 (unaffected) | — |
References
Browse GCVE Records
73,393 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.