GHSA-pvw5-cvp6-cv92HighCVSS 7.5
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
🔗 CVE IDs covered (1)
📋 Description
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
🔗 References (11)
- https://nvd.nist.gov/vuln/detail/CVE-2022-48560
- https://bugs.python.org/issue39421
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J
- https://security.netapp.com/advisory/ntap-20230929-0008
- https://github.com/advisories/GHSA-pvw5-cvp6-cv92