OSV-2023-738

    Dashboard / Vulnerabilities / OSV-2023-738

    OSV-2023-738

    Published: 25 Aug 2023Last Modified: 25 Aug 2023

    Summary: Use-of-uninitialized-value in _PyFunction_FromConstructor

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61721 ``` Crash type: Use-of-uninitialized-value Crash state: _PyFunction_FromConstructor PyEval_EvalCode exec_code_in_module ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61721

    Affected packages

    Package

    Name: cpython3

    Purl: pkg:generic/cpython3

    Affected ranges

    Type: GIT

    Events:

    Introduced- b8f96b5eda5b376b05a9dbf046208388249e30a6
    Fixed -3107b453bcceb0e2d2590fef3612859f2f802d72

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-738 | CVE-DB