CVSS 9.8 · Critical EPSS 23,3%
Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada python, fedoraproject fedora +8 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| python | python | Versi 3.6.0 hingga 3.6.12 |
| python | python | Versi 3.7.0 hingga 3.7.9 |
| python | python | Versi 3.8.0 hingga 3.8.7 |
| python | python | Versi 3.9.0 hingga 3.9.1 |
| fedoraproject | fedora | Versi 32 |
| fedoraproject | fedora | Versi 33 |
| netapp | active iq unified manager | Semua versi |
| netapp | ontap select deploy administration utility | Semua versi |
| debian | debian linux | Versi 9.0 |
| oracle | communications cloud native core network function cloud native environment | Versi 22.2.0 |
| oracle | communications offline mediation controller | Versi 12.0.0.3.0 |
| oracle | communications pricing design center | Versi 12.0.0.3.0 |
| oracle | enterprise manager ops center | Versi 12.4.0.0 |
| oracle | zfs storage appliance kit | Versi 8.8 |