CVE-2022-48564
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Pr...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
python-min
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.6.13"},{"introduced":"3.7.0"},{"fixed":"3.7.10"},{"introduced":"3.8.0"},{"fixed":"3.8.7"},{"introduced":"3.9.0"},{"fixed":"3.9.1"}]}]
Bitnami
libpython
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.6.13"},{"introduced":"3.7.0"},{"fixed":"3.7.10"},{"introduced":"3.8.0"},{"fixed":"3.8.7"},{"introduced":"3.9.0"},{"fixed":"3.9.1"}]}]
Bitnami
python
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.6.13"},{"introduced":"3.7.0"},{"fixed":"3.7.10"},{"introduced":"3.8.0"},{"fixed":"3.8.7"},{"introduced":"3.9.0"},{"fixed":"3.9.1"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-48564 pypy3 Corrigé dans: 7.3.5+dfsg-2
- Ubuntu UBUNTU-CVE-2022-48564 python2.7 Corrigé dans: 2.7.6-8ubuntu0.6+esm18
Références
- advisory bugs.python.org
- advisory lists.debian.org
- advisory security.netapp.com
- web nvd.nist.gov