Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-33503

Опубликовано: 29 июн. 2021
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

РелизСтатусПримечание
bionic

not-affected

embedded urllib3 not affected
devel

not-affected

20.3.4-4
esm-apps/bionic

not-affected

embedded urllib3 not affected
esm-apps/focal

released

20.0.2-5ubuntu1.7
esm-apps/jammy

not-affected

20.3.4-4
esm-apps/xenial

not-affected

embedded urllib3 not affected
esm-infra-legacy/trusty

not-affected

embedded urllib3 not affected
focal

released

20.0.2-5ubuntu1.7
groovy

ignored

end of life
hirsute

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

1.26.5-1~exp1
esm-infra-legacy/trusty

not-affected

esm-infra/bionic

not-affected

esm-infra/focal

not-affected

1.25.8-2ubuntu0.2
esm-infra/xenial

not-affected

focal

released

1.25.8-2ubuntu0.2
groovy

ignored

end of life
hirsute

ignored

end of life
impish

not-affected

1.26.5-1~exp1

Показывать по

EPSS

Процентиль: 74%
0.00863
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 4 лет назад

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

CVSS3: 7.5
nvd
почти 4 года назад

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

CVSS3: 7.5
msrc
почти 4 года назад

Описание отсутствует

CVSS3: 7.5
debian
почти 4 года назад

An issue was discovered in urllib3 before 1.26.5. When provided with a ...

suse-cvrf
почти 4 года назад

Security update for python-urllib3

EPSS

Процентиль: 74%
0.00863
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2021-33503