Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-29651

Опубликовано: 09 дек. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

РелизСтатусПримечание
bionic

released

1.5.2-1ubuntu0.1
devel

not-affected

1.10.0-1
esm-apps/bionic

released

1.5.2-1ubuntu0.1
esm-apps/focal

released

1.8.1-1ubuntu0.1
esm-apps/jammy

not-affected

1.10.0-1
esm-apps/noble

not-affected

1.10.0-1
esm-apps/xenial

needed

esm-infra-legacy/trusty

DNE

focal

released

1.8.1-1ubuntu0.1
groovy

ignored

end of life

Показывать по

EPSS

Процентиль: 74%
0.00848
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 5 лет назад

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

CVSS3: 7.5
nvd
около 5 лет назад

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

CVSS3: 7.5
msrc
около 5 лет назад

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

CVSS3: 7.5
debian
около 5 лет назад

A denial of service via regular expression in the py.path.svnwc compon ...

suse-cvrf
больше 4 лет назад

Security update for python-py

EPSS

Процентиль: 74%
0.00848
Низкий

5 Medium

CVSS2

7.5 High

CVSS3