read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-testUpgrade platform-pythonUpgrade python3-libsUpgrade python3-tkinterUpgrade python3-idleUpgrade platform-python-debugUpgrade platform-python-devel | Jan 18, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python3-toolsUpgrade python3-testUpgrade python3-debuginfoUpgrade python3-tkinterUpgrade python3-libsUpgrade python3-develUpgrade python3Upgrade python3-debug | Aug 29, 2024 | Aug 22, 2023 |
| Centos_linux | — | Upgrade platform-pythonUpgrade python3-testUpgrade python3-debugsourceUpgrade python3-tkinterUpgrade python3-debuginfoUpgrade python3-libsUpgrade python3-idleUpgrade platform-python-develUpgrade platform-python-debug | Jan 11, 2024 | Aug 22, 2023 |
| Debian | — | Upgrade pypy3Upgrade python3.9 | Oct 13, 2023 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3-develUpgrade python3Upgrade python3-test | Jul 23, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade platform-python-debugUpgrade python3-libsUpgrade python3-testUpgrade platform-pythonUpgrade platform-python-develUpgrade python3-idleUpgrade python3-tkinter | Jan 11, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade python3-testUpgrade python3-idleUpgrade python3-tkinterNo solution existsUpgrade python3-libsUpgrade python3-debuginfoUpgrade python3-debugsourceUpgrade platform-python-debugUpgrade platform-python-develUpgrade platform-python | Jan 11, 2024 | Aug 22, 2023 |
| Ubuntu | — | Upgrade python3.8 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro) | Nov 24, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub