REDHAT-BUG-2418084: Medium severity Python Software Foundation Python plistlib vulnerability
When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2418084?
The severity of REDHAT-BUG-2418084 is classified as medium with a risk rating of 4.
How does REDHAT-BUG-2418084 affect the application?
REDHAT-BUG-2418084 can lead to out-of-memory (OOM) conditions and denial-of-service (DoS) issues when processing malicious plist files.
Who is affected by REDHAT-BUG-2418084?
All users of the Python plistlib module from the Python Software Foundation are potentially affected by REDHAT-BUG-2418084.
How do I fix REDHAT-BUG-2418084?
To address REDHAT-BUG-2418084, it is recommended to update to a patched version of the Python software that resolves this vulnerability.
What should I do if I cannot upgrade to fix REDHAT-BUG-2418084?
If upgrading is not possible, minimize the risk by implementing strict controls on the input plist files and utilizing resource limits.