CVE-2021-3177Critical· 9.8▾ MidnightPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 4.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
23%
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
python >= 3.6.0, <= 3.6.12python >= 3.7.0, <= 3.7.9python >= 3.8.0, <= 3.8.7python >= 3.9.0, <= 3.9.1fedora = 32fedora = 33active_iq_unified_managerontap_select_deploy_administration_utilitydebian_linux = 9.0communications_cloud_native_core_network_function_cloud_native_environment = 22.2.0communications_offline_mediation_controller = 12.0.0.3.0communications_pricing_design_center = 12.0.0.3.0enterprise_manager_ops_center = 12.4.0.0zfs_storage_appliance_kit = 8.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-23336Medium· 5.9The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by usi…
CVE-2021-4189Medium· 5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
CVE-2021-3737High· 7.5A flaw was found in python
CVE-2021-3426Medium· 5.7There's a flaw in Python 3's pydoc
CVE-2021-29921Critical· 9.8In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string
CVE-2021-3733Medium· 6.5There's a flaw in urllib's AbstractBasicAuthHandler class