Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43019
HistoryAug 30, 2023 - 10:31 p.m.

Denial Of Service (DoS)

2023-08-3022:31:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
python3.9
dos
plistlib
vulnerability
remote attacker
plist file
cpu
memory
resources
denial-of-service
attack
software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

24.1%

python3.9 is vulnerable to Denial of Service (DoS) attacks. This vulnerability exists due to a flaw in the way the plistlib module parses certain Apple Property List (plist) files in binary format. A remote attacker can exploit this vulnerability by sending a specially crafted plist file, which could cause the Python interpreter to use excessive CPU and memory resources, leading to a denial-of-service attack.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

24.1%