CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-3177

CVSS 9.8v3.1pub. 2021-01-19upd. 2025-12-18

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debian
OS
Debian
9.0
Fedora Project Fedora
OS
Fedoraproject
3233
Netapp Active Iq Unified Manager
APP
Netapp
all versions
Netapp Ontap Select Deploy Administration Utility
APP
Netapp
all versions
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
APP
Oracle
22.2.0
Oracle Communications Offline Mediation Controller
APP
Oracle
12.0.0.3.0
Oracle Communications Pricing Design Center
APP
Oracle
12.0.0.3.0
Oracle Enterprise Manager Ops Center
APP
Oracle
12.4.0.0
Oracle Zfs Storage Appliance Kit
APP
Oracle
8.8
Python
APP
Python
3.9.0 – 3.9.13.8.0 – 3.8.73.7.0 – 3.7.93.6.0 – 3.6.12