Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-42969

Опубликовано: 16 окт. 2022
Источник: redhat
CVSS3: 3.1
EPSS Низкий

Описание

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

Отчет

This has been disputed by multiple parties, including the upstream maintainers, as not being reproducible or a valid vulnerability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 4ose-aws-efs-utils-containerFix deferred
Service Telemetry Framework 1.5stf/prometheus-webhook-snmp-rhel8Fix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-1333
https://bugzilla.redhat.com/show_bug.cgi?id=2312846py: ReDoS in py library when used with subversion

EPSS

Процентиль: 31%
0.00115
Низкий

3.1 Low

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 5.3
nvd
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 5.3
msrc
4 месяца назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 5.3
debian
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to co ...

suse-cvrf
почти 3 года назад

Security update for python-py

EPSS

Процентиль: 31%
0.00115
Низкий

3.1 Low

CVSS3