Title: gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96499 · python/cpython · GitHub
Open Graph Title: gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96499 · python/cpython
X Title: gh-95778: CVE-2020-10735: Prevent DoS by very large int() by gpshead · Pull Request #96499 · python/cpython
Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digits can consume several CPU seconds. This PR comes fresh from a pile of work done in our private PSRT security response team repo. Signed-off-by: Christian Heimes [Red Hat] christian@python.org Tons-of-polishing-up-by: Gregory P. Smith [Google] greg@krypto.org Reviews via the private PSRT repo via many others (see the NEWS entry in the PR). Issue: gh-95778 I wrote up a one pager for the release managers. Much of that text wound up in the Issue. Backports PRs already exist. See the issue for links. Further Discussion ... is taking place in discuss.python.org threads remaining TODOs (aka project management) After this ships: file a follow-up issue to move int_max_str_digits into PyConfig in 3.12. After this ships: file a feature request to add PySys_Audit hook calls at the new ValueError raise spots. If this ships in 3.11rc2: file an issue to update the version notes about it in the 3.12 docs to say 3.11 and remove the 3.12 whatsnew text. The above are tracked in #96512. RedHat's CNA reserved that CVE number, they control interaction and coordination with MITRE on marking it public and assigning the score. - @tiran assign CVSS score Assuming worst case, we they'll likely assign CVSS score 7.5 (High) to the issue, https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.1
Open Graph Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digit...
X Description: Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of d...
Opengraph URL: https://github.com/python/cpython/pull/96499
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/checks(.:format) |
| route-controller | pull_requests |
| route-action | checks |
| fetch-nonce | v2:2ad89300-1f86-f47d-8160-8678f971fbe7 |
| current-catalog-service-hash | 87dc3bc62d9b466312751bfd5f889726f4f1337bdff4e8be7da7c93d6c00a25a |
| request-id | E754:3E83DD:87E91:B5AC1:6969B56B |
| html-safe-nonce | b493a30eaab44c0102a7a76f2e3f8e51d63aef969da709970fa62748dd50ddca |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNzU0OjNFODNERDo4N0U5MTpCNUFDMTo2OTY5QjU2QiIsInZpc2l0b3JfaWQiOiI3NTYxNzE3MTI1Mjk4NjMyMDQzIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | af1efc8960f753742786abb9c8d0c06ff513bc586a46f3f7cf2c9385e6e605cc |
| hovercard-subject-tag | pull_request:1044478487 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,checks,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/python/cpython/pull/96499/checks |
| twitter:image | https://avatars.githubusercontent.com/u/68491?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/68491?s=400&v=4 |
| og:image:alt | Integer to and from text conversions via CPython's bignum int type is not safe against denial of service attacks due to malicious input. Very large input strings with hundred thousands of digit... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | b23b8fcc855cd29bb04d6c94aafa62d336bf44eefa8229444eecc968cad03aee |
| turbo-cache-control | no-preview |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive full-width full-width-p-0 |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 0672399d88424758731ec07fe24509e23bb17fb5 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width