CVE-2021-3177Critical· 9.8▾ AbyssalPoC availablePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 53.9 · likelihood 4.8 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
23%
23% → 24%
Exploit / PoC code exists
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
python >= 3.6.0, <= 3.6.12python >= 3.7.0, <= 3.7.9python >= 3.8.0, <= 3.8.7python >= 3.9.0, <= 3.9.1fedora = 32fedora = 33active_iq_unified_managerontap_select_deploy_administration_utilitydebian_linux = 9.0communications_cloud_native_core_network_function_cloud_native_environment = 22.2.0communications_offline_mediation_controller = 12.0.0.3.0communications_pricing_design_center = 12.0.0.3.0enterprise_manager_ops_center = 12.4.0.0zfs_storage_appliance_kit = 8.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-45061High· 7.5An issue was discovered in Python before 3.11.1
CVE-2015-20107High· 7.6In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file
CVE-2021-23336Medium· 5.9The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by usi…
CVE-2021-4189Medium· 5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
CVE-2021-3737High· 7.5A flaw was found in python
CVE-2021-3426Medium· 5.7There's a flaw in Python 3's pydoc