CVE-2021-3177
Public on 2021-01-19
Modified on 2024-03-01
Description
A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability.
Severity
CVSS v3 Base Score
See breakdown
Affected Packages
Platform | Package | Release Date | Advisory | Status |
---|---|---|---|---|
HAQM Linux 2 - Core | python | 2021-02-19 | ALAS2-2021-1611 | Fixed |
HAQM Linux 1 | python27 | 2021-02-23 | ALAS-2021-1484 | Fixed |
HAQM Linux 2 - Core | python3 | 2021-02-19 | ALAS2-2021-1611 | Fixed |
HAQM Linux 2023 | python3.9 | Not Affected | ||
HAQM Linux 1 | python36 | 2021-02-23 | ALAS-2021-1484 | Fixed |
HAQM Linux 1 | python38 | 2021-02-23 | ALAS-2021-1484 | Fixed |
HAQM Linux 2 - Python3.8 Extra | python38 | 2023-08-21 | ALAS2PYTHON3.8-2023-005 | Fixed |
CVSS Scores
Score Type | Score | Vector | |
---|---|---|---|
HAQM Linux | CVSSv3 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
NVD | CVSSv3 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
NVD | CVSSv2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |