Lucene search
HistoryDec 23, 2022 - 12:15 a.m.
CVE-2022-40899
python charmers
future
denial of service
cve-2022-40899
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
Affected configurations
Node
pythoncharmerspython-futureRange≤0.18.2python
| CPE | Name | Operator | Version |
|---|---|---|---|
| pythoncharmers:python-future | pythoncharmers python-future | le | 0.18.2 |
Related
debiancve
debiancve
CVE-2022-40899
2022-12-23 00:15:14
osv
osv
CVE-2022-40899
2022-12-23 00:15:14
Python Charmers Future denial of service vulnerability
2022-12-23 00:30:23
PYSEC-2022-42991
2022-12-23 00:15:00
nessus
nessus
RHEL 7 : future (Unpatched Vulnerability)
2024-06-03 00:00:00
SUSE SLES12 Security Update : python-future (SUSE-SU-2023:0078-1)
2023-01-13 00:00:00
ubuntucve
ubuntucve
CVE-2022-40899
2022-12-23 00:00:00
redhatcve
redhatcve
CVE-2022-40899
2023-01-31 10:35:44
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future (CVE-2022-40899)
2023-03-31 17:20:29
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
2023-06-20 04:41:00
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48
redos
redos
ROS-20230428-01
2023-04-28 00:00:00
prion
prion
Code injection
2022-12-23 00:15:00
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2023:0079-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0078-1)
2023-01-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0080-1)
2023-01-12 00:00:00
mageia
mageia
Updated python-future packages fix security vulnerability
2023-02-07 03:06:39
ubuntu
ubuntu
python-future vulnerability
2023-01-31 00:00:00
cvelist
cvelist
CVE-2022-40899
2022-12-22 00:00:00
github
github
Python Charmers Future denial of service vulnerability
2022-12-23 00:30:23
nvd
nvd
CVE-2022-40899
2022-12-23 00:15:14
redhat
redhat
rocky
rocky
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2022-40899