Improper resource allocation In pypy3
Description
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 7.3.5+dfsg-2 | ||
debian 12 | 7.3.5+dfsg-2 | ||
debian 13 | 7.3.5+dfsg-2 | ||
debian 14 | 7.3.5+dfsg-2 | ||
debian 11 | 3.9.1~rc1-1 | ||
 rpm rhel7 | - | - | |
rpm rhel8 | 0:3.6.8-56.el8_9.2 | ||
rpm rhel8.6 | 0:3.6.8-47.el8_6.4 | ||
rpm rhel8.8 | 0:3.6.8-51.el8_8.4 |
Aliases
1. 2. 3. 4. 5.