Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 104
SUSE-SU-2022:3553-1
Security update for python
SUSE-SU-2022:3544-1
Security update for python3
SUSE-SU-2022:3483-1
Security update for python36
GHSA-6jr7-xr67-mgxw
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
CVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
CVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexi ...
CVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
BDU:2023-03855
Уязвимость интерпретатора языка программирования Python, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-05599
Уязвимость интерпретатора языка программирования Python, связанная с ошибками при преобразовании типов данных int и str, позволяющая нарушителю вызвать отказ в обслуживании из-за алгоритмической сложности
CVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | SUSE-SU-2022:3553-1 Security update for python | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:3544-1 Security update for python3 | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2022:3483-1 Security update for python36 | 2% Низкий | почти 4 года назад | |
| GHSA-6jr7-xr67-mgxw A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. | CVSS3: 7.5 | 6% Низкий | почти 4 года назад |
 | CVE-2020-10735 A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. | CVSS3: 7.5 | 6% Низкий | почти 4 года назад |
| CVE-2020-10735 A flaw was found in python. In algorithms with quadratic time complexi ... | CVSS3: 7.5 | 6% Низкий | почти 4 года назад |
 | CVE-2020-10735 A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. | CVSS3: 7.5 | 6% Низкий | почти 4 года назад |
 | BDU:2023-03855 Уязвимость интерпретатора языка программирования Python, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | почти 4 года назад |
| BDU:2022-05599 Уязвимость интерпретатора языка программирования Python, связанная с ошибками при преобразовании типов данных int и str, позволяющая нарушителю вызвать отказ в обслуживании из-за алгоритмической сложности | CVSS3: 7.1 | почти 4 года назад | |
 | CVE-2020-10735 A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. | CVSS3: 7.5 | 6% Низкий | почти 4 года назад |
Уязвимостей на страницу