A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
Se ha encontrado un fallo en python. Una respuesta HTTP manejada inapropiadamente en el código del cliente HTTP de python puede permitir a un atacante remoto, que controle el servidor HTTP, hacer que el script del cliente entre en un bucle infinito, consumiendo tiempo de CPU. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:M/Au:N/C:N/I:N/A:C
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-835
|
| [email protected] | Primary |
en
CWE-400
en
CWE-835
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| python | python | * | <built-in method update of dict object at 0x7fd2dbc6bb40> | Application |
| python | python | * | <built-in method update of dict object at 0x7fd38541cec0> | Application |
| python | python | * | <built-in method update of dict object at 0x7fd341542300> | Application |
| python | python | * | <built-in method update of dict object at 0x7fd31b20da80> | Application |
| redhat | codeready_linux_builder | 8.0 | <built-in method update of dict object at 0x7fd2dbc6abc0> | Application |
| redhat | codeready_linux_builder_for_ibm_z_systems | 8.0 | <built-in method update of dict object at 0x7fd34b9c1980> | Application |
| redhat | codeready_linux_builder_for_power_little_endian | 8.0 | <built-in method update of dict object at 0x7fd348ef0b40> | Application |
| redhat | enterprise_linux | 6.0 | <built-in method update of dict object at 0x7fd31b20dd00> | Operating System |
| redhat | enterprise_linux | 7.0 | <built-in method update of dict object at 0x7fd34b9c3d80> | Operating System |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd2dbc69fc0> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0 | <built-in method update of dict object at 0x7fd34b9c1140> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 8.0 | <built-in method update of dict object at 0x7fd38541dc00> | Operating System |
| fedoraproject | fedora | 33 | <built-in method update of dict object at 0x7fd3415f2c80> | Operating System |
| fedoraproject | fedora | 34 | <built-in method update of dict object at 0x7fd34b9c2c80> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd3415406c0> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd34b9c3240> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7fd2dbc69b80> | Operating System |
| canonical | ubuntu_linux | 20.04 | <built-in method update of dict object at 0x7fd3850568c0> | Operating System |
| canonical | ubuntu_linux | 21.04 | <built-in method update of dict object at 0x7fd385057040> | Operating System |
| netapp | hci | - | <built-in method update of dict object at 0x7fd34019f040> | Application |
| netapp | management_services_for_element_software | - | <built-in method update of dict object at 0x7fd3685307c0> | Application |
| netapp | netapp_xcp_smb | - | <built-in method update of dict object at 0x7fd31b20ccc0> | Application |
| netapp | ontap_select_deploy_administration_utility | - | <built-in method update of dict object at 0x7fd34b9c3700> | Application |
| netapp | xcp_nfs | - | <built-in method update of dict object at 0x7fd38541cf00> | Application |
| oracle | communications_cloud_native_core_binding_support_function | 22.1.3 | <built-in method update of dict object at 0x7fd34019cc00> | Application |
| oracle | communications_cloud_native_core_network_exposure_function | 22.1.1 | <built-in method update of dict object at 0x7fd368533440> | Application |
| oracle | communications_cloud_native_core_policy | 22.2.0 | <built-in method update of dict object at 0x7fd38541d1c0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:netapp_xcp_smb:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:xcp_nfs:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:* |