Python plistlib DoS before 3.9.1 via malformed binary PLIST
CVE-2022-48564 Published on August 22, 2023

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

NVD


Products Associated with CVE-2022-48564

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-48564 are published in these products:

Python
 
Canonical Ubuntu Linux
 
NetApp Active Iq Unified Manager
 

Exploit Probability

EPSS
0.10%
Percentile
27.13%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.