Lucene search

MitreCVE-2016-6581

HistoryJan 10, 2017 - 3:59 p.m.

CVE-2016-6581

2017-01-1015:59:00

CWE-399

mitre

web.nvd.nist.gov

cve-2016-6581

http/2

python hpack library

denial of service attack

security vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called “HPACK Bomb” attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.

Affected configurations

Nvd

Node

pythonhpackMatch1.0

pythonhpackMatch2.0

pythonhpackMatch2.0.1

pythonhpackMatch2.1.1

pythonhpackMatch2.2

pythonhyperMatch0.4

pythonhyperMatch0.6

VendorProductVersionCPE
pythonhpack1.0cpe:2.3:a:python:hpack:1.0:*:*:*:*:*:*:*
pythonhpack2.0cpe:2.3:a:python:hpack:2.0:*:*:*:*:*:*:*
pythonhpack2.0.1cpe:2.3:a:python:hpack:2.0.1:*:*:*:*:*:*:*
pythonhpack2.1.1cpe:2.3:a:python:hpack:2.1.1:*:*:*:*:*:*:*
pythonhpack2.2cpe:2.3:a:python:hpack:2.2:*:*:*:*:*:*:*
pythonhyper0.4cpe:2.3:a:python:hyper:0.4:*:*:*:*:*:*:*
pythonhyper0.6cpe:2.3:a:python:hyper:0.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
python	hpack	1.0	cpe:2.3:a:python:hpack:1.0:::::::*
python	hpack	2.0	cpe:2.3:a:python:hpack:2.0:::::::*
python	hpack	2.0.1	cpe:2.3:a:python:hpack:2.0.1:::::::*
python	hpack	2.1.1	cpe:2.3:a:python:hpack:2.1.1:::::::*
python	hpack	2.2	cpe:2.3:a:python:hpack:2.2:::::::*
python	hyper	0.4	cpe:2.3:a:python:hyper:0.4:::::::*
python	hyper	0.6	cpe:2.3:a:python:hyper:0.6:::::::*

References

www.securityfocus.com/bid/92315

python-hyper.org/hpack/en/latest/security/CVE-2016-6581.html

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Related for CVE-2016-6581