VDB
BDU%3A2024-08865
BDU%3A2024-08865
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Уязвимость модуля subprocess интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| python | cpython | 3.13.0, 3.12.0 |
| Python Software Foundation | CPython | 3.12.0, 3.13.0a1 |
| Canonical Ltd., Сообщество свободного программного обеспечения, Python Software Foundation | Ubuntu, Debian GNU/Linux, Python |
Timeline
- Dec 8, 2023 CVE Published
- Dec 31, 2023 PoC Published
- Nov 1, 2024 CVE Updated
References
- https://ubuntu.com/security/CVE-2023-6507 url
- https://github.com/python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06 advisory
- https://mail.python.org/archives/list/security-announce@python.org/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/ vendor-advisory
- https://github.com/python/cpython/issues/112334 issue
- https://github.com/python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82b advisory
- https://github.com/python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610 url
- https://security-tracker.debian.org/tracker/CVE-2023-6507 advisory