{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Python ist eine universelle, \u00fcblicherweise interpretierte, h\u00f6here Programmiersprache.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-2119 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2119.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-2119 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2119"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory",
        "url": "https://access.redhat.com/errata/RHSA-2024:0430"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:0901-1 vom 2024-03-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018166.html"
      },
      {
        "category": "external",
        "summary": "DELL Security Update",
        "url": "https://www.dell.com/support/kbdoc/de-de/000221476/dsa-2024-058-security-update-for-dell-networker-vproxy-multiple-components-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2024-2400 vom 2024-01-10",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2400.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:0464-1 vom 2024-02-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017915.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-0114 vom 2024-01-11",
        "url": "http://linux.oracle.com/errata/ELSA-2024-0114.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:0114 vom 2024-01-10",
        "url": "https://access.redhat.com/errata/RHSA-2024:0114"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:0586 vom 2024-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2024:0586"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7114471 vom 2024-02-02",
        "url": "https://www.ibm.com/support/pages/node/7114471"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-pvw5-cvp6-cv92 vom 2023-08-22",
        "url": "https://github.com/advisories/GHSA-pvw5-cvp6-cv92"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-p8vw-m6qq-w42v vom 2023-08-22",
        "url": "https://github.com/advisories/GHSA-p8vw-m6qq-w42v"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-crhm-wc96-7579 vom 2023-08-22",
        "url": "https://github.com/advisories/GHSA-crhm-wc96-7579"
      },
      {
        "category": "external",
        "summary": "GitHub Security Advisory GHSA-cgfh-jp5w-8cmx vom 2023-08-22",
        "url": "https://github.com/advisories/GHSA-cgfh-jp5w-8cmx"
      },
      {
        "category": "external",
        "summary": "Proof of Concept (PoC) f\u00fcr CVE-2022-48560",
        "url": "https://bugs.python.org/issue39421"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6354-1 vom 2023-09-07",
        "url": "https://ubuntu.com/security/notices/USN-6354-1"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3575 vom 2023-09-20",
        "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6394-1 vom 2023-09-21",
        "url": "https://ubuntu.com/security/notices/USN-6394-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6400-1 vom 2023-09-27",
        "url": "https://ubuntu.com/security/notices/USN-6400-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:4001-1 vom 2023-10-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016561.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20231006-0007 vom 2023-10-06",
        "url": "https://security.netapp.com/advisory/ntap-20231006-0007/"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20231006-0013 vom 2023-10-06",
        "url": "https://security.netapp.com/advisory/ntap-20231006-0013/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3614 vom 2023-10-11",
        "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-DE99CDB793 vom 2023-10-12",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-de99cdb793"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-EA38857CC3 vom 2023-10-12",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-ea38857cc3"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-348A0DBCF3 vom 2023-10-12",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-348a0dbcf3"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-E47078AF3E vom 2023-10-12",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-e47078af3e"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6394-2 vom 2023-10-17",
        "url": "https://ubuntu.com/security/notices/USN-6394-2"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:4220-1 vom 2023-10-26",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016861.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-2317 vom 2023-10-27",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2317.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2023-2330 vom 2023-11-02",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2330.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1880 vom 2023-11-03",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1880.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6513-1 vom 2023-11-23",
        "url": "https://ubuntu.com/security/notices/USN-6513-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6513-2 vom 2023-11-27",
        "url": "https://ubuntu.com/security/notices/USN-6513-2"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-35FB07D135 vom 2023-11-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-35fb07d135"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-34A3A5ADBA vom 2023-11-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-34a3a5adba"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-7BAD83A2E2 vom 2023-11-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-7bad83a2e2"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-9954DAE554 vom 2023-11-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-9954dae554"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7145367 vom 2024-03-27",
        "url": "https://www.ibm.com/support/pages/node/7145367"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7148094 vom 2024-04-11",
        "url": "https://www.ibm.com/support/pages/node/7148094"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-198 vom 2024-05-08",
        "url": "https://www.dell.com/support/kbdoc/000224827/dsa-2024-="
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:1667-1 vom 2024-05-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018539.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K000139691 vom 2024-05-20",
        "url": "https://my.f5.com/manage/s/article/K000139691"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:2987 vom 2024-05-22",
        "url": "https://access.redhat.com/errata/RHSA-2024:2987"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-2987 vom 2024-05-28",
        "url": "https://linux.oracle.com/errata/ELSA-2024-2987.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:1847-1 vom 2024-05-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-May/018627.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Python: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-05-30T22:00:00.000+00:00",
      "generator": {
        "date": "2024-05-31T09:08:15.429+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-2119",
      "initial_release_date": "2023-08-22T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-08-22T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-09-07T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-09-20T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-09-21T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-09-27T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-10-08T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE und NetApp aufgenommen"
        },
        {
          "date": "2023-10-11T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-10-17T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-10-26T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE und Amazon aufgenommen"
        },
        {
          "date": "2023-11-02T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-11-05T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-11-23T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-11-27T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-11-29T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2024-01-09T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2024-01-10T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2024-01-24T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-01-28T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-01-30T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-02-04T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-02-14T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-03-14T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-03-27T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-04-11T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-05-07T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-05-15T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-05-20T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von F5 aufgenommen"
        },
        {
          "date": "2024-05-21T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-05-28T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-05-30T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "30"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vProxy\u003c19.9.0.4",
                "product": {
                  "name": "Dell NetWorker vProxy\u003c19.9.0.4",
                  "product_id": "T032377",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:vproxy_19.9.0.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vProxy\u003c19.10",
                "product": {
                  "name": "Dell NetWorker vProxy\u003c19.10",
                  "product_id": "T032378",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:vproxy_19.10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "virtual",
                "product": {
                  "name": "Dell NetWorker virtual",
                  "product_id": "T034583",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC Avamar",
            "product": {
              "name": "EMC Avamar",
              "product_id": "T014381",
              "product_identification_helper": {
                "cpe": "cpe:/a:emc:avamar:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "17.1.0-17.1.1",
                "product": {
                  "name": "F5 BIG-IP 17.1.0-17.1.1",
                  "product_id": "T034899",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:17.1.0_-_17.1.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "16.1.0-16.1.4",
                "product": {
                  "name": "F5 BIG-IP 16.1.0-16.1.4",
                  "product_id": "T034901",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:16.1.0_-_16.1.4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.1.0-15.1.10",
                "product": {
                  "name": "F5 BIG-IP 15.1.0-15.1.10",
                  "product_id": "T034902",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:15.1.0_-_15.1.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM App Connect Enterprise",
            "product": {
              "name": "IBM App Connect Enterprise",
              "product_id": "T032495",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:app_connect_enterprise:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP8",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP8",
                  "product_id": "T033681",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T016960",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=3.9.1",
                "product": {
                  "name": "Open Source Python \u003c=3.9.1",
                  "product_id": "T029458",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:python:python:3.9.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Python"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-48560",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Python. Dieser Fehler besteht in \"heappushpop\" in \"heapq\" aufgrund eines use-after-free Fehlers. Ein Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T034899",
          "T032377",
          "T032378",
          "67646",
          "T034902",
          "T034901",
          "T034583",
          "T033681",
          "T004914",
          "T016960",
          "74185",
          "T032495",
          "T022954",
          "T014381",
          "2951",
          "T002207",
          "T000126",
          "398363"
        ],
        "last_affected": [
          "T029458"
        ]
      },
      "release_date": "2023-08-22T22:00:00Z",
      "title": "CVE-2022-48560"
    },
    {
      "cve": "CVE-2022-48564",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in Python. Dieser Fehler besteht in \"read_ints\" in \"plistlib.py\" aufgrund einer CPU- und RAM-Ersch\u00f6pfung bei der Verarbeitung von missgebildeten \"Apple Property List\" Dateien im Bin\u00e4rformat. Ein Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T034899",
          "T032377",
          "T032378",
          "67646",
          "T034902",
          "T034901",
          "T034583",
          "T033681",
          "T004914",
          "T016960",
          "74185",
          "T032495",
          "T022954",
          "T014381",
          "2951",
          "T002207",
          "T000126",
          "398363"
        ],
        "last_affected": [
          "T029458"
        ]
      },
      "release_date": "2023-08-22T22:00:00Z",
      "title": "CVE-2022-48564"
    },
    {
      "cve": "CVE-2022-48565",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt eine Schwachstelle in Python. Die Schwachstelle besteht aufgrund der Einbettung von Entity-Deklarationen in \"XML plist\"-Dateien, die vom \"plistlib\"-Modul verarbeitet werden. Durch die Manipulation von XML-Dateien, so dass diese auf externe Entit\u00e4ten verweisen, kann ein Angreifer diese Schwachstelle ausnutzen, um m\u00f6glicherweise Dateien zu manipulieren oder vertrauliche Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T034899",
          "T032377",
          "T032378",
          "67646",
          "T034902",
          "T034901",
          "T034583",
          "T033681",
          "T004914",
          "T016960",
          "74185",
          "T032495",
          "T022954",
          "T014381",
          "2951",
          "T002207",
          "T000126",
          "398363"
        ],
        "last_affected": [
          "T029458"
        ]
      },
      "release_date": "2023-08-22T22:00:00Z",
      "title": "CVE-2022-48565"
    },
    {
      "cve": "CVE-2022-48566",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt eine Schwachstelle in Python. Die Schwachstelle befindet sich in der Funktion \"compare_digest\" der Komponente \"hmac\". Diese Komponente soll die Effizienz verbessern und untergr\u00e4bt unbeabsichtigt die zeitkonstante Natur von Vergleichen, was es einem Angreifer erm\u00f6glicht, Zeitunterschiede auszunutzen und die Integrit\u00e4t von sicherheitsrelevanten Operationen zu gef\u00e4hrden, die auf \"compare_digest\" angewiesen sind. Ein Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T034899",
          "T032377",
          "T032378",
          "67646",
          "T034902",
          "T034901",
          "T034583",
          "T033681",
          "T004914",
          "T016960",
          "74185",
          "T032495",
          "T022954",
          "T014381",
          "2951",
          "T002207",
          "T000126",
          "398363"
        ],
        "last_affected": [
          "T029458"
        ]
      },
      "release_date": "2023-08-22T22:00:00Z",
      "title": "CVE-2022-48566"
    }
  ]
}