CVE-2019-19275

🗓️ 26 Nov 2019 14:08:17Reported by mitreType

typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source may be able to crash the interpreter process

Reporter	Title	Published	Views	Family All 34
Circl	CVE-2019-19275	28 Feb 202415:11	–	circl
CNVD	typed_ast buffer overflow vulnerability (CNVD-2020-03184)	28 Nov 201900:00	–	cnvd
Cvelist	CVE-2019-19275	26 Nov 201914:08	–	cvelist
Debian CVE	CVE-2019-19275	26 Nov 201914:08	–	debiancve
EUVD	EUVD-2019-0150	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 30 Update: python3-typed_ast-1.4.0-2.fc30	14 Mar 202000:25	–	fedora
Tenable Nessus	Fedora 30 : python3-typed_ast (2020-9b3dabc21c)	16 Mar 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : python-typed-ast (openSUSE-2020-567)	4 May 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2019-19275	30 Aug 202500:00	–	nessus
Github Security Blog	typed-ast Out-of-bounds Read	2 Dec 201918:03	–	github

NVD

Node

python typed_astMatch1.3.0

python typed_astMatch1.3.1

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5H4Q6LFVRX7SFXLBEJMNQFI4T5SCEA/
bugs	www.bugs.python.org/issue36495
github	www.github.com/python/cpython/commit/dcfcd146f8e6fc5c2fc16a4c192a0c5f5ca8c53c
github	www.github.com/python/typed_ast/commit/156afcb26c198e162504a57caddfe0acd9ed7dce
github	www.github.com/python/cpython/commit/a4d78362397fc3bced6ea80fbc7b5f4827aec55e
github	www.github.com/python/typed_ast/commit/dc317ac9cff859aa84eeabe03fb5004982545b3b

21 Nov 2024 04:34Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.0136

CWE-125