Amazon Linux AMI : python27 (ALAS-2018-945)
High Nessus Plugin ID 106690
Synopsis
The remote Amazon Linux AMI host is missing a security update.
Description
Integer overflow in PyString_DecodeEscape results in heap-base buffer
overflow
CPython (aka Python) is vulnerable to an integer overflow in the
PyString_DecodeEscape function in stringobject.c, resulting in
heap-based buffer overflow (and possible arbitrary code execution)
(CVE-2017-1000158)
Solution
Run 'yum update python27' to update your system.