Unscored USN-3496-1 1 CVE

python2.7 vulnerability

Published Nov 28, 2017 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python incorrectly handled decoding certain strings.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	python2.7	2.7.6-8ubuntu0.4
Ubuntu · 16.04 LTS 16.04:LTS	python2.7	2.7.12-1ubuntu0~16.04.2

Vulnerabilities 1

Unscored —

CVE-2017-1000158

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringo…

python3.4 python3.5 python2.7 python-py Debian Ubuntu Azure Linux Alpine

Nov 17, 2017

References

report
https://ubuntu.com/security/CVE-2017-1000158