CVE catalog

CVE-2021-3177

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrus

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published
Updated
Source
[NVD] · [CVE record]
EPSS
24.22% · Oct 25, 2026

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpepythonNot reportedNot reportedunknown
CpepythonNot reportedNot reportedunknown
CpepythonNot reportedNot reportedunknown
CpepythonNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
Cpeactive_iq_unified_managerNot reportedNot reportedunknown
Cpeactive_iq_unified_managerNot reportedNot reportedunknown
Cpeontap_select_deploy_administration_utilityNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Cpecommunications_cloud_native_core_network_function_cloud_native_environmentNot reportedNot reportedunknown
Cpecommunications_offline_mediation_controllerNot reportedNot reportedunknown
Cpecommunications_pricing_design_centerNot reportedNot reportedunknown
Cpeenterprise_manager_ops_centerNot reportedNot reportedunknown
Cpezfs_storage_appliance_kitNot reportedNot reportedunknown
Debianpython2.7112.7.18-2fixed
Debianpython3.9113.9.1-3fixed
Alpinepython33.103.7.7-r2fixed
Alpinepython33.113.8.2-r2fixed
Alpinepython33.123.8.5-r1fixed
Alpinepython33.133.8.7-r1fixed
Alpinepython33.143.8.7-r2fixed
Alpinepython33.153.8.7-r2fixed
Alpinepython33.163.8.7-r2fixed
Alpinepython33.173.8.7-r2fixed
Alpinepython33.183.8.7-r2fixed
Alpinepython33.193.8.7-r2fixed
Alpinepython33.203.8.7-r2fixed
Alpinepython33.213.8.7-r2fixed
Alpinepython33.223.8.7-r2fixed
Alpinepython33.233.8.7-r2fixed
Alpinepython33.243.8.7-r2fixed
Ubuntupython2.7pro2.7.5-8ubuntu3vulnerable
Ubuntupython2.7pro2.7.5-8ubuntu4vulnerable
Ubuntupython2.7pro2.7.6-2vulnerable
Ubuntupython2.7pro2.7.6-2ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-3vulnerable
Ubuntupython2.7pro2.7.6-3ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-4vulnerable
Ubuntupython2.7pro2.7.6-4ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-5vulnerable
Ubuntupython2.7pro2.7.6-7vulnerable
Ubuntupython2.7pro2.7.6-8vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.2vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.3vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.4vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.5vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm2vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm3vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm5vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm6vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm7vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm8vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm9vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm10fixed
Ubuntupython2.7pro2.7.5-8ubuntu3vulnerable
Ubuntupython2.7pro2.7.5-8ubuntu4vulnerable
Ubuntupython2.7pro2.7.6-2vulnerable
Ubuntupython2.7pro2.7.6-2ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-3vulnerable
Ubuntupython2.7pro2.7.6-3ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-4vulnerable
Ubuntupython2.7pro2.7.6-4ubuntu1vulnerable
Ubuntupython2.7pro2.7.6-5vulnerable
Ubuntupython2.7pro2.7.6-7vulnerable
Ubuntupython2.7pro2.7.6-8vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.2vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.3vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.4vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.5vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm2vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm3vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm5vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm6vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm7vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm8vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm9vulnerable
Ubuntupython2.7pro2.7.6-8ubuntu0.6+esm10fixed
Ubuntupython3.4pro3.4~b1-0ubuntu3vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu4vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu6vulnerable
Ubuntupython3.4pro3.4~b1-5ubuntu2vulnerable
Ubuntupython3.4pro3.4~b2-1vulnerable
Ubuntupython3.4pro3.4~b3-1ubuntu1vulnerable
Ubuntupython3.4pro3.4~rc1-1build1vulnerable
Ubuntupython3.4pro3.4~rc2-1vulnerable
Ubuntupython3.4pro3.4~rc3-0ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.5vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm2vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm7vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm8vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm10fixed
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.4~14.04.1vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.4~14.04.1+esm1fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.2vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.3vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.4vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.8vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.9vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.11vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.12vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.13vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.14vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.16vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.18fixed
Ubuntupython3.516.043.5.0-3vulnerable
Ubuntupython3.516.043.5.0-3ubuntu1vulnerable
Ubuntupython3.516.043.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.516.043.5.1-1vulnerable
Ubuntupython3.516.043.5.1-2vulnerable
Ubuntupython3.516.043.5.1-3vulnerable
Ubuntupython3.516.043.5.1-5vulnerable
Ubuntupython3.516.043.5.1-6ubuntu1vulnerable
Ubuntupython3.516.043.5.1-6ubuntu2vulnerable
Ubuntupython3.516.043.5.1-9ubuntu1vulnerable
Ubuntupython3.516.043.5.1-10vulnerable
Ubuntupython3.516.043.5.2-2~16.01vulnerable
Ubuntupython3.516.043.5.2-2~16.04vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.1vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.2vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.3vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.4vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.5vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.8vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.9vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.10vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.11vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.12vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.13fixed
Ubuntupython2.718.042.7.14-2ubuntu2vulnerable
Ubuntupython2.718.042.7.14-4vulnerable
Ubuntupython2.718.042.7.14-6vulnerable
Ubuntupython2.718.042.7.14-7vulnerable
Ubuntupython2.718.042.7.14-8vulnerable
Ubuntupython2.718.042.7.15~rc1-1vulnerable
Ubuntupython2.718.042.7.15~rc1-1ubuntu0.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.2vulnerable
Ubuntupython2.718.042.7.17-1~18.04vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.1vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.2vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.3vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.5vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.6fixed
Ubuntupython3.618.043.6.3-1ubuntu1vulnerable
Ubuntupython3.618.043.6.4~rc1-1vulnerable
Ubuntupython3.618.043.6.4~rc1-2vulnerable
Ubuntupython3.618.043.6.4-1vulnerable
Ubuntupython3.618.043.6.4-2vulnerable
Ubuntupython3.618.043.6.4-3build1vulnerable
Ubuntupython3.618.043.6.4-4vulnerable
Ubuntupython3.618.043.6.5~rc1-1vulnerable
Ubuntupython3.618.043.6.5-3vulnerable
Ubuntupython3.618.043.6.6-1~18.04vulnerable
Ubuntupython3.618.043.6.7-1~18.04vulnerable
Ubuntupython3.618.043.6.8-1~18.04.1vulnerable
Ubuntupython3.618.043.6.8-1~18.04.2vulnerable
Ubuntupython3.618.043.6.8-1~18.04.3vulnerable
Ubuntupython3.618.043.6.9-1~18.04vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1.1vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1.3vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1.4fixed
Ubuntupython3.718.043.7.0~a2-1vulnerable
Ubuntupython3.718.043.7.0~a3-1vulnerable
Ubuntupython3.718.043.7.0~a3-2vulnerable
Ubuntupython3.718.043.7.0~a3-3vulnerable
Ubuntupython3.718.043.7.0~a4-1vulnerable
Ubuntupython3.718.043.7.0~b1-1vulnerable
Ubuntupython3.718.043.7.0~b1-1build1vulnerable
Ubuntupython3.718.043.7.0~b2-1vulnerable
Ubuntupython3.718.043.7.0~b3-1vulnerable
Ubuntupython3.718.043.7.0-1~18.04vulnerable
Ubuntupython3.718.043.7.1-1~18.04vulnerable
Ubuntupython3.718.043.7.3-2~18.04.1vulnerable
Ubuntupython3.718.043.7.5-2~18.04vulnerable
Ubuntupython3.718.043.7.5-2~18.04.4fixed
Ubuntupython3.818.043.8.0-3~18.04vulnerable
Ubuntupython3.818.043.8.0-3~18.04.1fixed
Ubuntupython2.720.042.7.17~rc1-1vulnerable
Ubuntupython2.720.042.7.17-1vulnerable
Ubuntupython2.720.042.7.17-1ubuntu5vulnerable
Ubuntupython2.720.042.7.17-1ubuntu6vulnerable
Ubuntupython2.720.042.7.18~rc1-2vulnerable
Ubuntupython2.720.042.7.18-1~20.04vulnerable
Ubuntupython2.720.042.7.18-1~20.04.1fixed
Ubuntupython3.820.043.8.0-1vulnerable
Ubuntupython3.820.043.8.0-2vulnerable
Ubuntupython3.820.043.8.0-3vulnerable
Ubuntupython3.820.043.8.0-4vulnerable
Ubuntupython3.820.043.8.0-5vulnerable
Ubuntupython3.820.043.8.1-2ubuntu3vulnerable
Ubuntupython3.820.043.8.2~rc1-1ubuntu1vulnerable
Ubuntupython3.820.043.8.2-1vulnerable
Ubuntupython3.820.043.8.2-1ubuntu1vulnerable
Ubuntupython3.820.043.8.2-1ubuntu1.1vulnerable
Ubuntupython3.820.043.8.2-1ubuntu1.2vulnerable
Ubuntupython3.820.043.8.5-1~20.04vulnerable
Ubuntupython3.820.043.8.5-1~20.04.2fixed
Ubuntupython3.920.043.9.0~rc1-1~20.04vulnerable
Ubuntupython3.920.043.9.0-5~20.04vulnerable
Ubuntupython3.920.043.9.5-3~20.04.1fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.2vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.3vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.4vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.8vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.9vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.11vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.12vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.13vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.14vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.16vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.18fixed
Ubuntupython2.718.042.7.14-2ubuntu2vulnerable
Ubuntupython2.718.042.7.14-4vulnerable
Ubuntupython2.718.042.7.14-6vulnerable
Ubuntupython2.718.042.7.14-7vulnerable
Ubuntupython2.718.042.7.14-8vulnerable
Ubuntupython2.718.042.7.15~rc1-1vulnerable
Ubuntupython2.718.042.7.15~rc1-1ubuntu0.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.2vulnerable
Ubuntupython2.718.042.7.17-1~18.04vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.1vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.2vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.3vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.5vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.6fixed
Debianpython2.792.7.13-2vulnerable
Debianpython2.792.7.13-2+deb9u1vulnerable
Debianpython2.792.7.13-2+deb9u2vulnerable
Debianpython2.792.7.13-2+deb9u3vulnerable
Debianpython2.792.7.13-2+deb9u4vulnerable
Debianpython2.792.7.13-2+deb9u5vulnerable
Debianpython2.792.7.13-2+deb9u6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython2.7deb112.7.18-2Not reportedDEBIAN-CVE-2021-3177Not reported
Debianpython3.9deb113.9.1-3Not reportedDEBIAN-CVE-2021-3177Not reported
Alpinepython3apk3.103.7.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.113.8.2-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.123.8.5-r1Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.133.8.7-r1Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.143.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.153.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.163.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.173.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.183.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.193.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.203.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.213.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.223.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.233.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Alpinepython3apk3.243.8.7-r2Not reportedALPINE-CVE-2021-3177Not reported
Ubuntupython2.7debpro2.7.6-8ubuntu0.6+esm10Not reportedUSN-4754-5Not reported
Ubuntupython2.7debpro2.7.6-8ubuntu0.6+esm10Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.4debpro3.4.3-1ubuntu1~14.04.7+esm10Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.5debpro3.5.2-2ubuntu0~16.04.4~14.04.1+esm1Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.18Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.5deb16.043.5.2-2ubuntu0~16.04.13Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython2.7deb18.042.7.17-1~18.04ubuntu1.6Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.6deb18.043.6.9-1~18.04ubuntu1.4Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.7deb18.043.7.5-2~18.04.4Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.8deb18.043.8.0-3~18.04.1Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython2.7deb20.042.7.18-1~20.04.1Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.8deb20.043.8.5-1~20.04.2Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython3.9deb20.043.9.5-3~20.04.1Not reportedUBUNTU-CVE-2021-3177Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.18Not reportedUSN-4754-4Not reported
Ubuntupython2.7deb18.042.7.17-1~18.04ubuntu1.6Not reportedUSN-4754-4Not reported
Debianpython2.7deb92.7.13-2+deb9u6Not reportedDLA-2919-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References