Yüksek CVSS 7.5 PoC var

CVE-2021-3737: Python: güvenlik açığı

Yayın: 4 Mart 2022 22:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

Özet bilgiler

Ürün: Python Python
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %13,17 (yüzdelik 96)
CWE: CWE-835
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
python-python	3.6.0	—	3.6.14
python-python	3.7.0	—	3.7.11
python-python	3.8.0	—	3.8.11
python-python	3.9.0	—	3.9.6
redhat-codeready-linux-builder	8.0	8.0	—
redhat-codeready-linux-builder-for-ibm-z-systems	8.0	8.0	—
redhat-codeready-linux-builder-for-power-little-endian	8.0	8.0	—
redhat-enterprise-linux	6.0	6.0	—
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux-for-ibm-z-systems	8.0	8.0	—
redhat-enterprise-linux-for-power-little-endian	8.0	8.0	—
fedoraproject-fedora	33	33	—
fedoraproject-fedora	34	34	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	20.04	20.04	—
canonical-ubuntu-linux	21.04	21.04	—
netapp-hci	—	—	—
netapp-management-services-for-element-software	—	—	—
netapp-netapp-xcp-smb	—	—	—
netapp-ontap-select-deploy-administration-utility	—	—	—
netapp-xcp-nfs	—	—	—
oracle-communications-cloud-native-core-binding-support-function	22.1.3	22.1.3	—
oracle-communications-cloud-native-core-network-exposure-function	22.1.1	22.1.1	—
oracle-communications-cloud-native-core-policy	22.2.0	22.2.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları