CVE-2023-33595

Public on 2023-06-07
Modified on 2024-05-16
Description
CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.
Severity
Medium severity
Medium
CVSS v3 Base Score
5.5
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core python Not Affected
Amazon Linux 2 - Core python3 Not Affected
Amazon Linux 2023 python3.11 Not Affected
Amazon Linux 1 python38 Not Affected
Amazon Linux 2 - Python3.8 Extra python38 Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVSSv3 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H