Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-10735HistorySep 09, 2022 - 2:15 p.m.
CVE-2020-10735
2022-09-0914:15:08
Debian Security Bug Tracker
security-tracker.debian.org
39
python
parsing
integer
string
vulnerability
system availability
quadratic time complexity
non-binary bases
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.006
Percentile
77.9%
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(“text”), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 11 | all | pypy3 | <= 7.3.5+dfsg-2+deb11u2 | pypy3_7.3.5+dfsg-2+deb11u2_all.deb |
| Debian | 999 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 13 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 11 | all | python2.7 | <= 2.7.18-8+deb11u1 | python2.7_2.7.18-8+deb11u1_all.deb |
| Debian | 12 | all | python3.11 | < 3.11.0~rc2-1 | python3.11_3.11.0~rc2-1_all.deb |
| Debian | 11 | all | python3.9 | <= 3.9.2-1 | python3.9_3.9.2-1_all.deb |
Related
openvas
openvas
Slackware: Security Advisory (SSA:2022-250-01)
2022-09-08 00:00:00
Fedora: Security Advisory for python3-docs (FEDORA-2022-ac82a548df)
2022-09-26 00:00:00
Fedora: Security Advisory for python3.11 (FEDORA-2022-0b3904c674)
2022-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: python3.8-3.8.14-1.fc35
2022-09-14 01:43:00
[SECURITY] Fedora 35 Update: python3-docs-3.10.7-1.fc35
2022-09-25 01:43:47
[SECURITY] Fedora 37 Update: python3.6-3.6.15-13.fc37
2022-11-10 22:40:39
osv
osv
CVE-2020-10735
2022-09-09 14:15:08
CGA-mpgv-5mmh-8xrq
2024-06-06 12:28:33
CGA-rc3g-2ww4-mmcq
2024-06-06 12:26:22
rocky
rocky
python3.9 security update
2022-11-02 13:53:37
python3 security update
2023-02-22 01:08:44
nessus
nessus
Fedora 36 : python3.6 (2022-d4570fc1a6)
2022-12-23 00:00:00
EulerOS Virtualization 2.10.0 : python3 (EulerOS-SA-2023-1172)
2023-01-10 00:00:00
nvd
nvd
CVE-2020-10735
2022-09-09 14:15:08
redhat
redhat
(RHSA-2022:7323) Moderate: python3.9 security update
2022-11-02 13:53:37
(RHSA-2022:6766) Moderate: rh-python38-python security update
2022-10-03 15:00:33
cbl_mariner
cbl_mariner
CVE-2020-10735 affecting package python3 3.7.13-6
2023-06-13 20:02:41
ibm
ibm
prion
prion
Design/Logic Flaw
2022-09-09 14:15:00
slackware
slackware
[slackware-security] python3
2022-09-07 18:45:50
wolfi
wolfi
CVE-2020-10735 vulnerabilities
2024-09-11 09:11:25
ubuntucve
ubuntucve
CVE-2020-10735
2022-09-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-09-19 16:12:15
redhatcve
redhatcve
CVE-2020-10735
2022-09-05 05:58:38
almalinux
almalinux
Moderate: python3.9 security update
2022-11-02 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2023-05-16 00:00:00
Moderate: python38:3.8 and python38-devel:3.8 security update
2023-05-16 00:00:00
amazon
amazon
Medium: python3
2022-12-01 20:31:00
redos
redos
ROS-20240614-02
2024-06-14 00:00:00
cgr
cgr
CVE-2020-10735 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2020-10735
2022-09-09 14:15:08
cvelist
cvelist
CVE-2020-10735
2022-09-09 00:00:00
freebsd
freebsd
Python -- multiple vulnerabilities
2020-03-20 00:00:00
oraclelinux
oraclelinux
python3.9 security update
2022-11-02 00:00:00
python3 security update
2023-02-22 00:00:00
python38:3.8 and python38-devel:3.8 security update
2023-05-23 00:00:00
aix
aix
suse
suse
Security update for python39 (important)
2022-10-01 00:00:00
Security update for python310 (important)
2022-09-30 00:00:00
mageia
mageia
Updated python3 packages fix security vulnerability
2022-10-08 23:22:22
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0329
2023-02-08 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0528
2023-02-08 00:00:00
debian
debian
[SECURITY] [DLA 3477-1] python3.7 security update
2023-06-30 20:52:04
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.006
Percentile
77.9%
Related for DEBIANCVE:CVE-2020-10735