CVE-2021-3177

 

Published at: - 19-01-2021 07:15

Last modified: - 25-07-2022 08:16

Total changes: - 24

Description

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://bugs.python.org/issue42938
• https://github.com/python/cpython/pull/24239
• https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html
• FEDORA-2021-cc3ff94cfc-Third Party Advisory
• FEDORA-2021-faf88b9499-Third Party Advisory
• GLSA-202101-18-Third Party Advisory
• FEDORA-2021-e3a5a74610-Third Party Advisory
• FEDORA-2021-ced31f3f0c-Third Party Advisory
• FEDORA-2021-42ba9feb47-Third Party Advisory
• FEDORA-2021-851c6e4e2d-Third Party Advisory
• FEDORA-2021-076a2dccba-Third Party Advisory
• FEDORA-2021-66547ff92d-Third Party Advisory
• FEDORA-2021-17668e344a-Third Party Advisory
• FEDORA-2021-d5cde50865-Third Party Advisory
• https://news.ycombinator.com/item?id=26185005
• FEDORA-2021-7547ad987f-Third Party Advisory
• FEDORA-2021-f4fd9372c7-Third Party Advisory
• FEDORA-2021-3352c1c802-Third Party Advisory
• [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar-Mailing List, Third Party Advisory
• FEDORA-2021-907f3bacae-Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210226-0003/
• [debian-lts-announce] 20210405 [SECURITY] [DLA 2619-1] python3.5 security update-Mailing List, Third Party Advisory
• N/A-Patch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• [debian-lts-announce] 20220212 [SECURITY] [DLA 2919-1] python2.7 security update-Mailing List, Third Party Advisory
• N/A-

 

Keywords

NVD

 

CVE-2021-3177

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures