Test ID:	1.3.6.1.4.1.25623.1.0.118246
Category:	Buffer overflow
Title:	Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Mac OS X
Summary:	CPython (aka Python) is prone to an integer overflow; vulnerability.
Description:	Summary: CPython (aka Python) is prone to an integer overflow vulnerability. Vulnerability Insight: An integer overflow in the 'PyString_DecodeEscape' function in 'stringobject.c' is resulting in a heap-based buffer overflow (and possible arbitrary code execution). Affected Software/OS: Python prior to version 2.7.14, versions 3.4.x prior to 3.4.8 and 3.5.x prior to 3.5.5. Solution: Update to version 2.7.14, 3.4.8, 3.5.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000158 Debian Security Information: DSA-4307 (Google Search) https://www.debian.org/security/2018/dsa-4307 https://security.gentoo.org/glsa/201805-02 https://bugs.python.org/issue30657 https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html http://www.securitytracker.com/id/1039890
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.