Lucene search

K
freebsdFreeBSDB4F8BE9E-56B2-11E1-9FB7-003067B2972C
HistoryFeb 13, 2012 - 12:00 a.m.

Python -- DoS via malformed XML-RPC / HTTP POST request

2012-02-1300:00:00
vuxml.freebsd.org
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.16

Percentile

96.0%

Jan Lieskovsky reports,

A denial of service flaw was found in the way Simple XML-RPC
Server module of Python processed client connections, that were
closed prior the complete request body has been received. A
remote attacker could use this flaw to cause Python Simple
XML-RPC based server process to consume excessive amount of
CPU.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.16

Percentile

96.0%