https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T02:51:48.259158+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-48564 CVE-2022-48564 2026-10-03T02:51:48.266604+00:00

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

 https://vulnerability.circl.lu/vuln/usn-6513-1 USN-6513-1 — python2.7, python3.5, python3.6 vulnerabilities 2026-10-03T02:51:48.266707+00:00

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6

It was discovered that Python incorrectly handled certain plist files. If a user or an automated system were tricked into processing a specially crafted plist file, an attacker could possibly use this issue to consume resources, resulting in a denial of service. (CVE-2022-48564)

It was discovered that Python instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake. An attacker could possibly use this issue to cause applications to treat unauthenticated received data before TLS handshake as authenticated data after TLS handshake. (CVE-2023-40217)