Поиск уязвимостей
Количество 29
Количество 29
BDU:2022-05838
Уязвимость класса AbstractBasicAuthHandler компонента urllib.request интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2022-1209
ALT-PU-2022-1209: package `python3` update to version 3.10.2-alt1
ALT-PU-2021-3010
ALT-PU-2021-3010: package `python` update to version 2.7.18-alt8
ALT-PU-2021-1784
ALT-PU-2021-1784: package `python3` update to version 3.9.5-alt1
ALT-PU-2022-3044
ALT-PU-2022-3044: package `python` update to version 2.7.18-alt10
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker ...
GHSA-wj55-vqcq-gxcp
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
ELSA-2021-4057
ELSA-2021-4057: python3 security update (MODERATE)
openSUSE-SU-2021:3489-1
Security update for python
openSUSE-SU-2021:1418-1
Security update for python
SUSE-SU-2021:3524-1
Security update for python
SUSE-SU-2021:3489-1
Security update for python
SUSE-SU-2021:3477-1
Security update for python3
openSUSE-SU-2021:4104-1
Security update for python3
SUSE-SU-2022:1485-1
Security update for python39
SUSE-SU-2021:4104-1
Security update for python3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-05838 Уязвимость класса AbstractBasicAuthHandler компонента urllib.request интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 5% Низкий | почти 6 лет назад |
| ALT-PU-2022-1209 ALT-PU-2022-1209: package `python3` update to version 3.10.2-alt1 | CVSS3: 6.5 | почти 5 лет назад | |
| ALT-PU-2021-3010 ALT-PU-2021-3010: package `python` update to version 2.7.18-alt8 | CVSS3: 7.5 | около 5 лет назад | |
| ALT-PU-2021-1784 ALT-PU-2021-1784: package `python3` update to version 3.9.5-alt1 | CVSS3: 9.8 | больше 5 лет назад | |
| ALT-PU-2022-3044 ALT-PU-2022-3044: package `python` update to version 2.7.18-alt10 | CVSS3: 9.8 | около 4 лет назад | |
 | CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | CVSS3: 6.5 | 5% Низкий | больше 4 лет назад |
 | CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | CVSS3: 6.5 | 5% Низкий | около 5 лет назад |
 | CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | CVSS3: 6.5 | 5% Низкий | больше 4 лет назад |
 | CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | CVSS3: 6.5 | 5% Низкий | больше 4 лет назад |
| CVE-2021-3733 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker ... | CVSS3: 6.5 | 5% Низкий | больше 4 лет назад |
| GHSA-wj55-vqcq-gxcp There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. | CVSS3: 6.5 | 5% Низкий | больше 4 лет назад |
| ELSA-2021-4057 ELSA-2021-4057: python3 security update (MODERATE) | 5% Низкий | около 5 лет назад | |
 | openSUSE-SU-2021:3489-1 Security update for python | около 5 лет назад | ||
| openSUSE-SU-2021:1418-1 Security update for python | около 5 лет назад | ||
| SUSE-SU-2021:3524-1 Security update for python | около 5 лет назад | ||
| SUSE-SU-2021:3489-1 Security update for python | около 5 лет назад | ||
| SUSE-SU-2021:3477-1 Security update for python3 | около 5 лет назад | ||
| openSUSE-SU-2021:4104-1 Security update for python3 | почти 5 лет назад | ||
| SUSE-SU-2022:1485-1 Security update for python39 | больше 4 лет назад | ||
| SUSE-SU-2021:4104-1 Security update for python3 | почти 5 лет назад |
Уязвимостей на страницу