- Vulnerability/
- USN-6524-1
USN-6524-1: PyPy vulnerability
First published: Wed Nov 29 2023(Updated: )
Nicky Mouha discovered that PyPy incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause PyPy to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/pypy3 | <7.3.9+dfsg-1ubuntu0.1 | 7.3.9+dfsg-1ubuntu0.1 |
| =22.04 | ||
| All of | ||
| ubuntu/pypy3 | <7.3.1+dfsg-4ubuntu0.1 | 7.3.1+dfsg-4ubuntu0.1 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-37454
- https://ubuntu.com/security/notices/USN-5717-1
- https://ubuntu.com/security/notices/USN-5767-1
- https://ubuntu.com/security/notices/USN-5888-1
- https://ubuntu.com/security/notices/USN-5767-3
- https://ubuntu.com/security/notices/USN-5930-1
- https://ubuntu.com/security/notices/USN-5931-1
- https://ubuntu.com/security/notices/USN-6525-1
- https://launchpad.net/ubuntu/+source/pypy3/7.3.9+dfsg-1ubuntu0.1
- https://launchpad.net/ubuntu/+source/pypy3/7.3.1+dfsg-4ubuntu0.1
- https://ubuntu.com/security/notices/USN-6524-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this PyPy vulnerability?
The vulnerability ID for this PyPy vulnerability is USN-6524-1.
What is the description of the PyPy vulnerability?
The PyPy vulnerability allows an attacker to crash the system or execute arbitrary code.
Which software versions are affected by this PyPy vulnerability?
Versions 7.3.9+dfsg-1ubuntu0.1 and 7.3.1+dfsg-4ubuntu0.1 of PyPy in Ubuntu 22.04 and Ubuntu 20.04 are affected.
How can an attacker exploit this PyPy vulnerability?
An attacker can exploit this PyPy vulnerability by using certain SHA-3 operations to cause PyPy to crash or execute arbitrary code.
How can I fix this PyPy vulnerability?
To fix this PyPy vulnerability, update PyPy to version 7.3.9+dfsg-1ubuntu0.1 for Ubuntu 22.04 or version 7.3.1+dfsg-4ubuntu0.1 for Ubuntu 20.04.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-5717-1
- anchor-related/USN-5767-1
- anchor-related/USN-5888-1
- anchor-related/USN-5767-3
- anchor-related/USN-5930-1
- anchor-related/USN-5931-1
- anchor-related/USN-6525-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04