Описание
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, nltk.app.wordnet_app allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple GET /SHUTDOWN%20THE%20SERVER request causes the process to terminate immediately via os._exit(0), resulting in a denial of service. Commit bbaae83db86a0f49e00f5b0db44a7254c268de9b patches the issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps-legacy/xenial | released | 3.1-1ubuntu0.1+esm4 |
| esm-apps/bionic | released | 3.2.5-1ubuntu0.1+esm4 |
| esm-apps/focal | released | 3.4.5-2ubuntu0.1~esm4 |
| esm-apps/jammy | released | 3.7-1ubuntu0.1~esm2 |
| esm-apps/noble | released | 3.8.1-1ubuntu0.1~esm2 |
| esm-apps/resolute | released | 3.9.2-1ubuntu0.1~esm2 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra-legacy/trusty | released | 2.0~b9-0ubuntu4.1~esm6 |
| jammy | needed |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple `GET /SHUTDOWN%20THE%20SERVER` request causes the process to terminate immediately via `os._exit(0)`, resulting in a denial of service. Commit bbaae83db86a0f49e00f5b0db44a7254c268de9b patches the issue.
NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when it is started in its default mode. A simple `GET /SHUTDOWN%20THE%20SERVER` request causes the process to terminate immediately via `os._exit(0)`, resulting in a denial of service. Commit bbaae83db86a0f49e00f5b0db44a7254c268de9b patches the issue.
NLTK (Natural Language Toolkit) is a suite of open source Python modul ...
Unauthenticated remote shutdown in nltk.app.wordnet_app
EPSS
7.5 High
CVSS3