Python 2.7.5 Remote Code Execution Vulnerability
(Doc ID 2888892.1)
Last updated on DECEMBER 06, 2022
Applies to:Enterprise Manager Base Platform - Version 18.104.22.168.0 and later
Information in this document applies to any platform.
Python 2.7.5 version is installed on Oracle Enterprise Manager 13.4 & 13.5 which is lead to multiple Security Vulnerabilities, including CVE-2014-1912 (CVSS 7.5) unauthenticated remote code execution.
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document