Orta CVSS 6.5 PoC var
CVE-2022-48564: Python: denetimsiz kaynak tüketimi
Açıklama (NVD)
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Özet bilgiler
- Ürün
- Python Python
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %1,65 (yüzdelik 77)
- CWE
- CWE-400
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| python-python | — | — | 3.6.13 |
| python-python | 3.7.0 | — | 3.7.10 |
| python-python | 3.8.0 | — | 3.8.7 |
| python-python | 3.9.0 | — | 3.9.1 |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-active-iq-unified-manager | — | — | — |