CVE:CVE-2020-10735
CNNVD:CNNVD-202209-155
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 存在安全漏洞，攻击者利用该漏洞可以通过大整数转换触发 Python Core 的过载，以触发拒绝服务。
solution:Upgrade python python to a higher version than 3.7.14,3.8.14,3.9.14,3.10.7,3.11.0:alpha1,3.11.0:alpha2,3.11.0:alpha3,3.11.0:alpha4,3.11.0:alpha5,3.11.0:alpha6,3.11.0:alpha7,3.11.0:beta1,3.11.0:beta2,3.11.0:beta3,3.11.0:beta4,3.11.0:beta5,3.11.0:rc1,and avoid the version [3.7.0,3.7.14),[3.8.0,3.8.14),[3.9.0,3.9.14),[3.10.0,3.10.7),3.11.0:alpha1,3.11.0:alpha2,3.11.0:alpha3,3.11.0:alpha4,3.11.0:alpha5,3.11.0:alpha6,3.11.0:alpha7,3.11.0:beta1,3.11.0:beta2,3.11.0:beta3,3.11.0:beta4,3.11.0:beta5,3.11.0:rc1; Upgrade redhat quay to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade redhat software_collections to a higher version than -; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0