[issue21529] JSON module: reading arbitrary process memory

Jesús Cea Avión added the comment: Fixed also in 3.2 (b9913eb96643), 3.3 (4f15bd1ab28f), 3.4 (7b95540ced5c) and 3.5 (3a414c709f1f). -- ___ Python tracker ___ ___

[issue21529] JSON module: reading arbitrary process memory

Changes by Jesús Cea Avión : -- nosy: +jcea ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python

[issue21529] JSON module: reading arbitrary process memory

Benjamin Peterson added the comment: http://hg.python.org/cpython/rev/50c07ed1743d http://hg.python.org/cpython/rev/a8facac493ef -- resolution: -> fixed status: open -> closed ___ Python tracker __

[issue21529] JSON module: reading arbitrary process memory

New submission from Benjamin Peterson: (Copy paste from the security list) Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the _json module caused by insufficient bounds checking. The sole prerequisites of this attack are that the attack