IM
IronMonkey Threat Research

CVE-2022-45061 HIGH

Published: 2022-11-09 | Last Modified: 2025-11-03 | Status: Modified

Description

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.

Additional Descriptions (1)

Se descubrió un problema en Python antes de la versión 3.11.1. Existe un algoritmo cuadrático innecesario en una ruta cuando se procesan algunas entradas al decodificador IDNA (RFC 3490), de modo que un nombre elaborado e irrazonablemente largo que se presente al decodificador podría provocar una denegación de servicio de la CPU. Los nombres de host suelen ser proporcionados por servidores remotos que podrían estar controlados por un actor malicioso; en tal escenario, podrían desencadenar un consumo excesivo de CPU en el cliente que intenta hacer uso de un supuesto nombre de host proporcionado por el atacante. Por ejemplo, el payload del ataque podría colocarse en el encabezado Ubicación de una respuesta HTTP con el código de estado 302. Está prevista una solución en 3.11.1, 3.10.9, 3.9.16, 3.8.16 y 3.7.16.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en CWE-407
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-407

Affected Products

Vendor Product Version Update Type
python python * <built-in method update of dict object at 0x7fd3697d7e40> Application
python python * <built-in method update of dict object at 0x7fd3697d4d80> Application
python python * <built-in method update of dict object at 0x7fd3697d6c40> Application
python python * <built-in method update of dict object at 0x7fd369ad7d40> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d6fc0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d6500> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d7140> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36a7efac0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d6bc0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d4400> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd369ad4280> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36a7ee1c0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d7940> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36a7ee000> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36945f3c0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36a7edec0> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd369ad4900> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3697d7280> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd369ad6c80> Application
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd369ad5fc0> Operating System
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd369ad6fc0> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd369ad7a40> Operating System
netapp active_iq_unified_manager - <built-in method update of dict object at 0x7fd3697d7d00> Application
netapp active_iq_unified_manager - <built-in method update of dict object at 0x7fd39c4a6040> Application
netapp e-series_performance_analyzer - <built-in method update of dict object at 0x7fd3697d6740> Application
netapp element_software - <built-in method update of dict object at 0x7fd369ee8340> Application
netapp hci - <built-in method update of dict object at 0x7fd369ad7840> Application
netapp management_services_for_element_software - <built-in method update of dict object at 0x7fd2a224b140> Application
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd36a7ef680> Application
netapp bootstrap_os - <built-in method update of dict object at 0x7fd39c479340> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:-:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha2:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha3:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha4:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha5:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha6:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha7:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta2:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta3:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta4:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta5:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:rc1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:rc2:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
Yes cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
Yes cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

References