| Package | Affected versions | Patched versions |
|---|---|---|
| communications cloud native core network function cloud native environment | = 22.2.0 | |
| communications offline mediation controller | = 12.0.0.3.0 | |
| communications pricing design center | = 12.0.0.3.0 | |
| enterprise manager ops center | = 12.4.0.0 | |
| zfs storage appliance kit | = 8.8 | |
| python | ≥ 3.6.0, ≤ 3.6.12≥ 3.7.0, ≤ 3.7.9≥ 3.8.0, ≤ 3.8.7≥ 3.9.0, ≤ 3.9.1 |
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free