Описание
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mpmath | fixed | 1.2.1-2 | package | |
| mpmath | no-dsa | bullseye | package | |
| mpmath | no-dsa | buster | package | |
| mpmath | no-dsa | stretch | package |
Примечания
https://github.com/yetingli/PoCs/blob/main/CVE-2021-29063/Mpmath.md
https://github.com/fredrik-johansson/mpmath/issues/548
https://github.com/fredrik-johansson/mpmath/commit/c811b37c65a4372a7ce613111d2a508c204f9833
https://github.com/fredrik-johansson/mpmath/commit/2865c7d12b2a077d420427ad187eca831a48bff4
EPSS
Связанные уязвимости
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.
Уязвимость функции mpmathify библиотеки mpmath интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании (ReDos)
EPSS