6.2
Medium
CVE-2020-10735 A flaw was found in python
Description
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Python | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- access.redhat.com access.redhat.com
- github.com github.com
- docs.google.com docs.google.com
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2022-46a44a7f83 lists.fedoraproject.org
- FEDORA-2022-66b65beccb lists.fedoraproject.org
- FEDORA-2022-4b31e33ed0 lists.fedoraproject.org
- FEDORA-2022-6d57598a23 lists.fedoraproject.org
- FEDORA-2022-f330bbfda2 lists.fedoraproject.org
- FEDORA-2022-29d436596f lists.fedoraproject.org
- FEDORA-2022-b01214472e lists.fedoraproject.org
- FEDORA-2022-dd5032bedf lists.fedoraproject.org
- FEDORA-2022-8535093cba lists.fedoraproject.org
- FEDORA-2022-72213986b8 lists.fedoraproject.org
- [oss-security] 20220921 big ints in python: CVE-2020-10735 www.openwall.com
- [oss-security] 20220921 Re: big ints in python: CVE-2020-10735 www.openwall.com
- FEDORA-2022-f511f8f58b lists.fedoraproject.org
- FEDORA-2022-c072cdc3c8 lists.fedoraproject.org
- FEDORA-2022-0b3904c674 lists.fedoraproject.org
- FEDORA-2022-141f632a6f lists.fedoraproject.org
- FEDORA-2022-ac82a548df lists.fedoraproject.org
- FEDORA-2022-d4570fc1a6 lists.fedoraproject.org
- FEDORA-2022-b8b34e62ab lists.fedoraproject.org
- FEDORA-2022-d1682fef04 lists.fedoraproject.org
- FEDORA-2022-79843dfb3c lists.fedoraproject.org
- FEDORA-2022-958fd7a32e lists.fedoraproject.org
- lists.debian.org lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Python
The 7 CVEs of Python →
CVE-2021-4189
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
5.3
Medium
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class
Not rated
CVE-2021-3737
A flaw was found in python
7.5
High
CVE-2022-0391
A flaw was found in Python, specifically within the urllib.parse module
7.5
High