Lucene search

CVE-2023-47627

🗓️ 14 Nov 2023 21:12:15Reported by GitHub_MType

aiohttp HTTP parser vulnerability in version 3.8.

Reporter	Title	Published	Views	Family All 69
Prion	Input validation	14 Nov 202321:15	–	prion
Prion	Security feature bypass	29 Jan 202423:15	–	prion
UbuntuCve	CVE-2023-47627	14 Nov 202300:00	–	ubuntucve
Tenable Nessus	Fedora 38 : llhttp / python-aiohttp / uxplay (2023-bc1f081ca0)	6 Dec 202300:00	–	nessus
Tenable Nessus	Fedora 39 : llhttp / python-aiohttp / uxplay (2023-5130a73b00)	6 Dec 202300:00	–	nessus
Tenable Nessus	Fedora 38 : python-aiohttp (2024-0ddda4c691)	8 Feb 202400:00	–	nessus
Tenable Nessus	Fedora 39 : python-aiohttp (2024-f249b74f03)	5 Feb 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-aiohttp, python-time-machine (SUSE-SU-2024:0577-1)	22 Feb 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.14.3 Async Security Update (Moderate) (RHSA-2024:1536)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Important) (RHSA-2024:1057)	8 Mar 202400:00	–	nessus

Nvd

Vulners

Node

aiohttp aiohttpRange<3.8.6

[
  {
    "vendor": "aio-libs",
    "product": "aiohttp",
    "versions": [
      {
        "version": "< 3.8.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VDKQ6HM3KNDU4OQI476ZWT4O7DMSIT35/
github	www.github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WQYQL6WV535EEKSNH7KRARLLMOW5WXDM/
github	www.github.com/aio-libs/aiohttp/commit/d5c12ba890557a575c313bb3017910d7616fce3d
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FUSJVQ7OQ55RWL4XAX2F5EZ73N4ZSH6U/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Nov 2023 21:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS35.3 - 7.5

EPSS0.002

SSVC

CWE-444