Description

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

Remediation

References

CVE-2022-48564

Related Vulnerabilities

WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.4)

WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-28032)

ZenCart Improper Input Validation Vulnerability (CVE-2009-4321)

WordPress Plugin Gravity Forms Arbitrary File Upload (1.8.19)

PHP Other Vulnerability (CVE-2003-0249)

Severity

Medium

Classification

CVE-2022-48564 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities