Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 7 min 171 bronnen 2 kritiek 1 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2021-3177

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-120

Beschrijving

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

Vendors

Python Fedoraproject Netapp Debian Oracle

Affected products

Python Fedora Active Iq Unified Manager Ontap Select Deploy Administration Utility Debian Linux Communications Cloud Native Core Network Function Cloud Native Environment Communications Offline Mediation Controller Communications Pricing Design Center Enterprise Manager Ops Center Zfs Storage Appliance Kit

References