CVE catalog

CVE-2014-7185

UBUNTU-CVE-2014-7185

Severity: Unknown
Published: Jun 23, 2014, 12:00:00 AM UTC
Updated: Aug 27, 2026, 12:47:32 PM UTC
Source: [NVD] · [CVE record]
EPSS: 5.12% · Oct 27, 2026

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	python2.7	11	`2.7.8-1`	fixed
Ubuntu	python2.7	14.04	`2.7.5-8ubuntu3`	vulnerable
Ubuntu	python2.7	14.04	`2.7.5-8ubuntu4`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-2`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-2ubuntu1`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-3`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-3ubuntu1`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-4`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-4ubuntu1`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-5`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-7`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-8`	vulnerable
Ubuntu	python2.7	14.04	`2.7.6-8ubuntu0.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	python2.7	deb	11	`2.7.8-1`	Not reported	DEBIAN-CVE-2014-7185	Not reported
Ubuntu	python2.7	deb	14.04	`2.7.6-8ubuntu0.2`	Not reported	UBUNTU-CVE-2014-7185	Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 4:41:35 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]