CVE-2022-48560CWE-416

CVE-2022-48560

High · published August 22, 2023

CVSS v3.1
7.5
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

A use-after-free exists in Python through 3.9 via heappushpop in heapq.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02042 · 81.0th percentile
Weakness
CWE-416 · Use After Free
Published
2023-08-22T23:16Z
Affected products (6)
ProductVersionsFixed in
python/python< 3.6.113.6.11
python/python≥ 3.7.0, < 3.7.73.7.7
python/python≥ 3.8.0, < 3.8.23.8.2
python/pythonall versions—
python/pythonall versions—
debian/debian_linuxall versions—
References (15)
https://bugs.python.org/issue39421 · af854a3a-2127-422b-91ae-364da2661108https://bugs.python.org/issue39421 · [email protected]https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html · [email protected]https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/ · [email protected]https://security.netapp.com/advisory/ntap-20230929-0008/ · [email protected]https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/[email protected]/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230929-0008/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 22 AUG 00:00Z
    A use-after-free exists in Python through 3.9 via heappushpop in heapq
    cvelistv5