exploitDog

CVE-2023-33595

Опубликовано: 07 июн. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

Ссылки

https://github.com/python/cpython/issues/103824
Issue Tracking
Vendor Advisory
https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf65574ddaabaf3a
Patch
https://github.com/python/cpython/issues/103824
Issue Tracking
Vendor Advisory
https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf65574ddaabaf3a
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:python:python:3.12.0:alpha7:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00041

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2023-33595

CVSS3: 5.5

ubuntu

больше 2 лет назад

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

CVE-2023-33595

CVSS3: 5.5

debian

больше 2 лет назад

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-fre ...

GHSA-pqc2-g93j-9599

CVSS3: 5.5

github

больше 2 лет назад

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

EPSS

Процентиль: 12%

0.00041

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416