Lucene search
K

40 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-14315

Malware in sbrugna...

9.1CVSS9AI score0.02851EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-5209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a...

9.1CVSS7.9AI score0.02851EPSS
Exploits0References2
OSV
OSV
added 2025/01/16 7:22 a.m.18 views

BIT-PYTHON-MIN-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS7.2AI score0.01447EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2024/01/10 12:12 p.m.1 views

python: DoS when processing malformed Apple Property List files in binary format

A vulnerability was found in the Python core plistlib library within the readints function in the plistlib.py file. In malformed input, the implementation can be manipulated to create an argument for struct.unpack. This issue can lead to excessive CPU and memory consumption, resulting in a...

6.5CVSS6.7AI score0.01447EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2024/01/10 12:12 p.m.40 views

Moderate: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.8AI score0.0177EPSS
Exploits2References4
AlmaLinux
AlmaLinux
added 2024/01/10 12:0 a.m.44 views

Moderate: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.1AI score0.0177EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2024/01/10 12:0 a.m.48 views

Oracle Linux 8 : python3 (ELSA-2024-0114)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0114 advisory. - Security fix for CVE-2022-48560 Resolves: rhbz2249755 Tenable has extracted the preceding description block directly from the Oracle Linux security...

7.5CVSS7.5AI score0.0177EPSS
Exploits2References3
OSV
OSV
added 2024/01/10 12:0 a.m.32 views

ALSA-2024:0114 Moderate: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS7.4AI score0.0177EPSS
Exploits2References6
OSV
OSV
added 2023/12/07 5:45 p.m.3 views

CLSA-2023-1701971140 Fix CVE(s): CVE-2022-48564, CVE-2023-40217

SECURITY UPDATE: potential DoS attack via CPU and RAM exhaustion - debian/patches/CVE-2022-48564.patch: Improve validation of Plist files that prevent DoS when processing malformed Apple Property List files in binary format - CVE-2022-48564 SECURITY UPDATE: TLS handshake bypass -...

6.5CVSS6.8AI score0.01447EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/09/20 12:0 a.m.30 views

Python < 3.6.13, 3.7.x < 3.7.10, 3.8.x < 3.8.7, 3.9.x < 3.9.1 DoS Vulnerability (bpo-42103) - Linux

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

6.5CVSS7.8AI score0.01447EPSS
Exploits1References3
OSV
OSV
added 2023/08/22 7:16 p.m.45 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.6AI score
Exploits0References3
Prion
Prion
added 2023/08/22 7:16 p.m.129 views

Format string

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

4.3CVSS6AI score0.01447EPSS
Exploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.28 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.9AI score0.01447EPSS
Exploits1References8
Cvelist
Cvelist
added 2023/08/22 12:0 a.m.31 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5AI score0.01447EPSS
Exploits1References3
OSV
OSV
added 2023/08/22 12:0 a.m.32 views

PSF-2023-10 DoS when reading malformed Apple Property List files in binary format

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.5AI score0.01447EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2023/08/22 12:0 a.m.44 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS7.6AI score0.01447EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2023/02/15 4:50 a.m.2 views

SUSE CVE-2017-5209

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data...

9.1CVSS6.5AI score0.02851EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.2 views

SUSE CVE-2017-5545

The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via Apple Property List data that is too short...

9.1CVSS6.5AI score0.03768EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for libplist (EulerOS-SA-2019-2395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.03768EPSS
Exploits0References2
OSV
OSV
added 2018/01/03 10:32 a.m.9 views

MGASA-2018-0025 Updated libplist packages fix security vulnerability

The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data CVE-2017-5209. The main function in plistutil.c in libimobiledevice libplist allowed attackers to...

9.1CVSS6.5AI score0.03768EPSS
Exploits6References4
Rows per page
Query Builder