Critical · published January 19, 2021
🔥 A crafty floating-point number can open the door to remote code execution in Python 3.x up to version 3.9.1! Think of it like a waiter serving an oversized meal that spills all over the table — a buffer overflow can cause a chaotic mess where untrusted input overflows and takes control. If anyone can order that meal, you can bet they’ll push the limits! An attacker could exploit this vulnerability to execute arbitrary code on the server, posing a significant risk. This could lead to unauthorized access, data breaches, or even total system takeover, allowing the assailant to wreak havoc on your applications and servers!
Think of it like a waiter serving an oversized meal that spills all over the table — a buffer overflow can cause a chaotic mess where untrusted input overflows and takes control. If anyone can order that meal, you can bet they’ll push the limits! This buffer overflow vulnerability occurs due to the unsafe use of the `sprintf` function in the PyCArg_repr method within the _ctypes module, allowing attackers to manipulate floating-point input and execute malicious code.
An attacker could exploit this vulnerability to execute arbitrary code on the server, posing a significant risk. This could lead to unauthorized access, data breaches, or even total system takeover, allowing the assailant to wreak havoc on your applications and servers! To mitigate this risk, immediately update to Python version 3.9.2 or later. Additionally, audit any applications that accept floating-point numbers from untrusted sources and apply input validation where possible. Don’t leave any spaces for attackers to exploit! You've got this! Follow these steps, and your Python applications will be safer than ever! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| python/python | ≥ 3.6.0, ≤ 3.6.12 | — |
| python/python | ≥ 3.7.0, ≤ 3.7.9 | — |
| python/python | ≥ 3.8.0, ≤ 3.8.7 | — |
| python/python | ≥ 3.9.0, ≤ 3.9.1 | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| debian/debian_linux | all versions | — |
| oracle/communications_cloud_native_core_network_function_cloud_native_environment | all versions | — |
| oracle/communications_offline_mediation_controller | all versions | — |
| oracle/communications_pricing_design_center | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/zfs_storage_appliance_kit | all versions | — |