Medium severity6.5NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026
CVE-2022-48564
CVE-2022-48564
Description
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31- osv-coords26 versionspkg:apk/chainguard/python-3.8-basepkg:apk/chainguard/python-3.9-docpkg:apk/chainguard/python-3.8-devpkg:bitnami/python-minpkg:apk/chainguard/python-3.8-defaultpkg:apk/chainguard/python-3.9-defaultpkg:apk/chainguard/python-3.7pkg:apk/chainguard/python-3.7-defaultpkg:apk/chainguard/python-3.7-devpkg:apk/chainguard/python-3.7-docpkg:bitnami/libpythonpkg:bitnami/pythonpkg:apk/chainguard/python-3.8-base-devpkg:apk/chainguard/python-3.8-docpkg:apk/chainguard/python-3.9-basepkg:apk/chainguard/python-3.8pkg:apk/chainguard/python-3.9pkg:apk/chainguard/python-3.9-base-devpkg:apk/chainguard/python-3.9-devpkg:rpm/almalinux/platform-pythonpkg:rpm/almalinux/platform-python-debugpkg:rpm/almalinux/platform-python-develpkg:rpm/almalinux/python3-idlepkg:rpm/almalinux/python3-libspkg:rpm/almalinux/python3-testpkg:rpm/almalinux/python3-tkinter
< 0+ 25 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.6.13
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.6.13
- (no CPE)range: < 3.6.13
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
- (no CPE)range: < 3.6.8-56.el8_9.2.alma.1
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:python:python:*:*:*:*:*:*:*:*range: <3.6.13
- (no CPE)
- (no CPE)range: <=3.9.1
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*+ 1 more
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
Patches
Vulnerability mechanics
References
3- bugs.python.org/issue42103nvdExploitIssue TrackingPatchVendor Advisory
- lists.debian.org/debian-lts-announce/2023/10/msg00017.htmlnvdMailing ListThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20230929-0009/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.