2 lines
5.8 KiB
JSON
2 lines
5.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CPython","repo":"https://github.com/python/cpython","vendor":"Python Software Foundation","versions":[{"lessThan":"3.10.21","status":"affected","version":"0","versionType":"python"},{"lessThan":"3.11.16","status":"affected","version":"3.11.0","versionType":"python"},{"lessThan":"3.12.14","status":"affected","version":"3.12.0","versionType":"python"},{"lessThan":"3.13.14","status":"affected","version":"3.13.0","versionType":"python"},{"lessThan":"3.14.6","status":"affected","version":"3.14.0","versionType":"python"},{"lessThan":"3.15.0b2","status":"affected","version":"3.15.0a1","versionType":"python"}]}],"source":"cna@python.org"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."},{"lang":"es","value":"unicodedata.normalize() puede consumir un tiempo excesivo de CPU al procesar entradas Unicode especialmente diseñadas que contienen largas secuencias de caracteres combinatorios con valores de Clase de Combinación Canónica alternos. Esto afecta a todas las formas de normalización."}],"id":"CVE-2026-3276","lastModified":"2026-11-10T13:19:05.943","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@python.org","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3276","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-03T17:27:09.393265Z","version":"2.0.3"}}]},"published":"2026-06-03T16:16:29.253","references":[{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc"},{"source":"cna@python.org","url":"https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c"},{"source":"cna@python.org","url":"https://github.com/python/cpython/issues/149079"},{"source":"cna@python.org","url":"https://github.com/python/cpython/pull/149080"},{"source":"cna@python.org","url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2026/06/03/15"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}],"sourceIdentifier":"cna@python.org","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-407"}],"source":"cna@python.org","type":"Secondary"}]}
|