Описание
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.7.17-1~18.04ubuntu1 |
| devel | DNE | |
| eoan | ignored | end of life |
| esm-apps/focal | released | 2.7.18-1~20.04.1 |
| esm-apps/jammy | not-affected | 2.7.18-13ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.7.6-8ubuntu0.6+esm5 |
| esm-infra/bionic | not-affected | 2.7.17-1~18.04ubuntu1 |
| esm-infra/xenial | not-affected | 2.7.12-1ubuntu0~16.04.11 |
| focal | released | 2.7.18-1~20.04.1 |
| groovy | ignored | end of life |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | not-affected | 3.4.3-1ubuntu1~14.04.7+esm6 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE | |
| jammy | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | not-affected | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| esm-infra/focal | DNE | |
| esm-infra/xenial | not-affected | 3.5.2-2ubuntu0~16.04.10 |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.6.9-1~18.04ubuntu1 |
| devel | DNE | |
| eoan | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 3.6.9-1~18.04ubuntu1 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.7.5-2ubuntu1~18.04.2 |
| devel | DNE | |
| eoan | released | 3.7.5-2~19.10ubuntu1 |
| esm-apps/bionic | released | 3.7.5-2ubuntu1~18.04.2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE | |
| impish | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.8.0-3ubuntu1~18.04.2 |
| devel | DNE | |
| eoan | ignored | end of life |
| esm-apps/bionic | released | 3.8.0-3ubuntu1~18.04.2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/focal | not-affected | 3.8.2-1ubuntu1.1 |
| focal | released | 3.8.2-1ubuntu1.1 |
| groovy | released | 3.8.2-1ubuntu1.1 |
| hirsute | DNE | |
| impish | DNE |
Показывать по
Ссылки на источники
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 ...
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
EPSS
7.1 High
CVSS2
6.5 Medium
CVSS3