Lucene search

K
osvGoogleOSV:PSF-2022-4
HistorySep 09, 2022 - 12:00 a.m.

Prevent DoS by large str-int conversions

2022-09-0900:00:00
Google
osv.dev
5

8.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.7%

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(“text”), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.