VDB
BDU%3A2024-02397
BDU%3A2024-02397
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Уязвимость функции lines_with_leading_tabs_expanded() файла strings.py программного средства форматирования Python-кода Black, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| python_software_foundation | black | 0 |
| n/a | black | 0 |
| Сообщество свободного программного обеспечения, Novell Inc., Python Software Foundation | Debian GNU/Linux, openSUSE Tumbleweed, Black |
Timeline
- Mar 19, 2024 CVE Published
- Mar 19, 2024 PoC Published
- Mar 19, 2024 PoC Published
- Mar 19, 2024 PoC Published
- Apr 1, 2024 CVE Updated
References
- https://github.com/advisories/GHSA-fj7x-q9j7-g6q6 url
- https://www.cybersecurity-help.cz/vdb/SB2024031822 url
- https://github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8 url
- https://github.com/psf/black/releases/tag/24.3.0 url
- https://security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273 url
- https://access.redhat.com/security/cve/CVE-2024-21503 url
- https://security-tracker.debian.org/tracker/CVE-2024-21503 advisory
- https://www.suse.com/ko-kr/security/cve/CVE-2024-21503.html advisory