It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex allowing for catastrophic backtracking. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service (ReDoS) condition for a client. (CVE-2020-8492)
It was discovered that the urllib.request.AbstractBasicAuthHandler class in Python contains regex with a quadratic worst-case time complexity. Specially crafted traffic from a malicious HTTP server could cause a regular expression denial of service (ReDoS) condition for a client. (CVE-2021-3733)
It was discovered that the Python urllib http client could enter into an infinite loop when incorrectly handling certain server responses (100 Continue response). Specially crafted traffic from a malicious HTTP server could cause a denial of service (DoS) condition for a client. (CVE-2021-3737)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "idle-python3.7" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7-dbg" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7-dev" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7-minimal" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7-stdlib" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "libpython3.7-testsuite" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-dbg" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-dev" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-doc" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-examples" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-minimal" }, { "binary_version": "3.7.5-2ubuntu1~18.04.2", "binary_name": "python3.7-venv" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "idle-python3.8" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8-dbg" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8-dev" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8-minimal" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8-stdlib" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "libpython3.8-testsuite" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8-dbg" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8-dev" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8-examples" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8-minimal" }, { "binary_version": "3.8.0-3ubuntu1~18.04.2", "binary_name": "python3.8-venv" } ] }