Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-3704

Высокий

ALT-PU-2018-3704: package python-module-flask update to version 1.0.2-alt1

Источник
errata.altlinux.org
Дата публикации
13.12.2018
Дата обновления
13.12.2018
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python-module-flask to version 1.0.2-alt1.

Устраненные уязвимости2

Ссылки3

ALT-PU-2018-3704https://errata.altlinux.org/ALT-PU-2018-3704

GHSA-562c-5r94-xh97

https://github.com/advisories/GHSA-562c-5r94-xh97

GHSA-5wv5-4vpf-pj6m

https://github.com/advisories/GHSA-5wv5-4vpf-pj6m

Связанные уязвимости

ubuntu логотип

CVE-2019-1010083

CVSS3: 7.5
ubuntu
больше 7 лет назад

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

redhat логотип

CVE-2019-1010083

CVSS3: 7.5
redhat
больше 8 лет назад

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

nvd логотип

CVE-2019-1010083

CVSS3: 7.5
nvd
больше 7 лет назад

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

debian логотип

CVE-2019-1010083

CVSS3: 7.5
debian
больше 7 лет назад

The Pallets Project Flask before 1.0 is affected by: unexpected memory ...

ubuntu логотип

CVE-2018-1000656

CVSS3: 7.5
ubuntu
около 8 лет назад

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.