Поиск уязвимостей
Количество 57
Количество 57
CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
CVE-2021-3177
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctyp ...
SUSE-SU-2020:3865-1
Security update for python36
openSUSE-SU-2021:0435-1
Security update for python
SUSE-SU-2021:0947-1
Security update for python3
SUSE-SU-2021:0887-1
Security update for python36
SUSE-SU-2021:0886-1
Security update for python3
SUSE-SU-2021:0768-1
Security update for python
GHSA-4qjw-vx62-3vqx
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
BDU:2021-03763
Уязвимость пакета cpython языка программирования Python, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю нарушить целостность данных или вызвать отказ в обслуживании
openSUSE-SU-2020:2333-1
Security update for python3
openSUSE-SU-2020:2332-1
Security update for python3
SUSE-SU-2020:3930-1
Security update for python3
GHSA-hc96-xw56-vfwh
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
ELSA-2021-9130
ELSA-2021-9130: python38:3.8 security update (IMPORTANT)
ELSA-2021-9129
ELSA-2021-9129: python36:3.6 security update (IMPORTANT)
ELSA-2021-9128
ELSA-2021-9128: python27:2.7 security update (IMPORTANT)
ELSA-2021-9107
ELSA-2021-9107: python security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-3177 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. | CVSS3: 5.9 | 24% Средний | почти 6 лет назад |
 | CVE-2021-3177 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. | CVSS3: 9.8 | 24% Средний | почти 6 лет назад |
 | CVE-2021-3177 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. | CVSS3: 9.8 | 24% Средний | почти 6 лет назад |
| CVE-2021-3177 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctyp ... | CVSS3: 9.8 | 24% Средний | почти 6 лет назад |
 | SUSE-SU-2020:3865-1 Security update for python36 | почти 6 лет назад | ||
| openSUSE-SU-2021:0435-1 Security update for python | 41% Средний | больше 5 лет назад | |
| SUSE-SU-2021:0947-1 Security update for python3 | 41% Средний | больше 5 лет назад | |
| SUSE-SU-2021:0887-1 Security update for python36 | 41% Средний | больше 5 лет назад | |
| SUSE-SU-2021:0886-1 Security update for python3 | 41% Средний | больше 5 лет назад | |
| SUSE-SU-2021:0768-1 Security update for python | 41% Средний | больше 5 лет назад | |
| GHSA-4qjw-vx62-3vqx Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') | CVSS3: 5.9 | 41% Средний | почти 5 лет назад |
 | BDU:2021-03763 Уязвимость пакета cpython языка программирования Python, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю нарушить целостность данных или вызвать отказ в обслуживании | CVSS3: 5.9 | 41% Средний | больше 5 лет назад |
| openSUSE-SU-2020:2333-1 Security update for python3 | почти 6 лет назад | ||
| openSUSE-SU-2020:2332-1 Security update for python3 | почти 6 лет назад | ||
| SUSE-SU-2020:3930-1 Security update for python3 | почти 6 лет назад | ||
| GHSA-hc96-xw56-vfwh Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. | CVSS3: 9.8 | 24% Средний | больше 4 лет назад |
| ELSA-2021-9130 ELSA-2021-9130: python38:3.8 security update (IMPORTANT) | 24% Средний | больше 5 лет назад | |
| ELSA-2021-9129 ELSA-2021-9129: python36:3.6 security update (IMPORTANT) | 24% Средний | больше 5 лет назад | |
| ELSA-2021-9128 ELSA-2021-9128: python27:2.7 security update (IMPORTANT) | 24% Средний | больше 5 лет назад | |
| ELSA-2021-9107 ELSA-2021-9107: python security update (IMPORTANT) | 24% Средний | больше 5 лет назад |
Уязвимостей на страницу