Yüksek CVSS 7.5

CVE-2020-10735: Python: güvenlik açığı

Yayın: 9 Eylül 2022 17:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.

Özet bilgiler

Ürün: Python Python
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %4,54 (yüzdelik 92)
CWE: CWE-704
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
python-python	3.7.0	—	3.7.14
python-python	3.8.0	—	3.8.14
python-python	3.9.0	—	3.9.14
python-python	3.10.0	—	3.10.7
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
python-python	3.11.0	3.11.0	—
redhat-quay	3.0.0	3.0.0	—
redhat-software-collections	—	—	—
fedoraproject-fedora	35	35	—
fedoraproject-fedora	36	36	—
fedoraproject-fedora	37	37	—
redhat-enterprise-linux	8.0	8.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları