PSF-2017-1.json

{
  "modified": "2023-08-25T16:05:33Z",
  "published": "2017-08-24T20:00:00Z",
  "schema_version": "1.5.0",
  "id": "PSF-2017-1",
  "aliases": [
    "CVE-2014-4616"
  ],
  "summary": "JSONDecoder.raw_decode",
  "details": "Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.",
  "affected": [
    {
      "ranges": [
        {
          "type": "GIT",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6c939cb6f6dfbd273609577b0022542d31ae2802"
            },
            {
              "fixed": "99b5afab74428e5ddfd877bdf3aa8a8c479696b1"
            }
          ],
          "repo": "https://github.com/python/cpython"
        }
      ]
    }
  ],
  "database_specific": {
    "cwe_ids": []
  },
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/security/cve/cve-2014-4616"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.python.org/issue21529"
    }
  ]
}