Lucene search

Veracode Vulnerability DatabaseVERACODE:37158

HistorySep 19, 2022 - 4:12 p.m.

Denial Of Service (DoS)

2022-09-1916:12:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.0%

JSON

python3.10:bookworm is vulnerable to Denial Of Service (DoS). The vulnerability exists in int() and PyLong_FromString() due to not limit amount of digits converting text to int leading which allows an attacker to cause an application crash via a malicious input.

CPENameOperatorVersion
python3.10:bookwormeq3.10.0~rc1-4
pythoneq2.4.3__24.el5_3.6
pythoneq2.4.3__27.el5_5.3
pythoneq2.6.6__29.el6
pythoneq2.4.3__27.el5_5.2
pythoneq2.7.5__86.el7
pythoneq2.4.3__46.el5
pythoneq2.6.6__37.el6_4
pythoneq2.7.5__88.el7
pythoneq2.6.6__20.el6

Name	Operator	Version
python3.10:bookworm	eq	3.10.0~rc1-4
python	eq	2.4.3__24.el5_3.6
python	eq	2.4.3__27.el5_5.3
python	eq	2.6.6__29.el6
python	eq	2.4.3__27.el5_5.2
python	eq	2.7.5__86.el7
python	eq	2.4.3__46.el5
python	eq	2.6.6__37.el6_4
python	eq	2.7.5__88.el7
python	eq	2.6.6__20.el6

Rows per page:

1-10 of 1041

References

www.openwall.com/lists/oss-security/2022/09/21/1

www.openwall.com/lists/oss-security/2022/09/21/4

access.redhat.com/errata/RHSA-2022:6766

access.redhat.com/errata/RHSA-2022:7323

access.redhat.com/security/cve/CVE-2020-10735

bugzilla.redhat.com/show_bug.cgi?id=1834423

docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y

github.com/python/cpython/issues/95778

lists.debian.org/debian-lts-announce/2023/06/msg00039.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VCU6EVQDIXNCEDJUCTFIER2WVNNDTYZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/32AAQKABEKFCB5DDV5OONRZK6BS23HPW/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EWKR2SPX3JORLWCXFY3KN2U5B5CIUQQ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XL6E5A3I36TRR73VNBOXNIQP4AMZDFZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76YE7AM37MRU76XJV4M27CWDAMUGNRYK/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRPVJZL6DJFWKYRHMNJB7VCEUCBKRF5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHC6IUU7CLRQ3QLPWUXLONSG3SXFTR47/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5U223OE5ZOUHZAZYSYSWVJQIKDE73E/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5WQB7Z3CXOWVBD2AFAHYPA5ONYFFZ4/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PD7FTLJOIGMUSCDR3JAN6WRFHJEE4PH5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZYJSGLSCQOKXXFVJVJQAXLEOJBIWGEL/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD7JDDKJXK6D26XAN3YRFNM2LAJHT5UO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMWPRAAJS7I6U3U45V7GZVXWNSECI22M/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBPDVCDIUCEBE7C4NAGNA2KQJYOTPBAZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/

lists.fedoraproject.org/archives/list/[email protected]/message/2VCU6EVQDIXNCEDJUCTFIER2WVNNDTYZ/

lists.fedoraproject.org/archives/list/[email protected]/message/32AAQKABEKFCB5DDV5OONRZK6BS23HPW/

lists.fedoraproject.org/archives/list/[email protected]/message/4EWKR2SPX3JORLWCXFY3KN2U5B5CIUQQ/

lists.fedoraproject.org/archives/list/[email protected]/message/6XL6E5A3I36TRR73VNBOXNIQP4AMZDFZ/

lists.fedoraproject.org/archives/list/[email protected]/message/76YE7AM37MRU76XJV4M27CWDAMUGNRYK/

lists.fedoraproject.org/archives/list/[email protected]/message/HSRPVJZL6DJFWKYRHMNJB7VCEUCBKRF5/

lists.fedoraproject.org/archives/list/[email protected]/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/

lists.fedoraproject.org/archives/list/[email protected]/message/NHC6IUU7CLRQ3QLPWUXLONSG3SXFTR47/

lists.fedoraproject.org/archives/list/[email protected]/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/

lists.fedoraproject.org/archives/list/[email protected]/message/OT5U223OE5ZOUHZAZYSYSWVJQIKDE73E/

lists.fedoraproject.org/archives/list/[email protected]/message/OT5WQB7Z3CXOWVBD2AFAHYPA5ONYFFZ4/

lists.fedoraproject.org/archives/list/[email protected]/message/PD7FTLJOIGMUSCDR3JAN6WRFHJEE4PH5/

lists.fedoraproject.org/archives/list/[email protected]/message/SZYJSGLSCQOKXXFVJVJQAXLEOJBIWGEL/

lists.fedoraproject.org/archives/list/[email protected]/message/TD7JDDKJXK6D26XAN3YRFNM2LAJHT5UO/

lists.fedoraproject.org/archives/list/[email protected]/message/TMWPRAAJS7I6U3U45V7GZVXWNSECI22M/

lists.fedoraproject.org/archives/list/[email protected]/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/

lists.fedoraproject.org/archives/list/[email protected]/message/UBPDVCDIUCEBE7C4NAGNA2KQJYOTPBAZ/

lists.fedoraproject.org/archives/list/[email protected]/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/

lists.fedoraproject.org/archives/list/[email protected]/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/

lists.fedoraproject.org/archives/list/[email protected]/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/

security-tracker.debian.org/tracker/CVE-2020-10735

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

51.0%

JSON

Related for VERACODE:37158