CVE
CVE-2017-1000158
CVE ID |
CVE-2017-1000158
|
---|---|
CVSS Score |
9.8
|
Operating System | |
Affected Versions |
CentOS 7
|
Patched Versions |
2.7.5-94_ol001.el7
|
Patch Date |
|
Additional Information
NVD Listing: https://nvd.nist.gov/vuln/detail/CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)