Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: 202110-14 Alert: Ruby Memory Corruption Threat Exploitation

gentoo
Calendar Grey September 12, 2005
Scroller Gentoo
Gentoo Security Notice regarding a critical stack buffer overflow vulnerability detected in the Python extension module. This flaw may permit unauthorized execution of arbitrary code.
The "re" Python module is vulnerable to a heap overflow, possibly leading to the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200509-08 https://security.gentoo.org/ Severity: Normal Title: Python: Heap overflow in the included PCRE library Date: September 12, 2005 Bugs: #104009 ID: 200509-08

Synopsis ======= The "re" Python module is vulnerable to a heap overflow, possibly leading to the execution of arbitrary code.
Background ========= Python is an interpreted, interactive, object-oriented, cross-platform programming language. The "re" Python module provides regular expression functions.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-lang/python < 2.3.5-r2 >= 2.3.5-r2
========== The "re" Python module makes use of a private copy of libpcre ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo arbitrary code execution heap overflow PCRE library normal Python

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo arbitrary code execution heap overflow PCRE library normal Python

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround