Lucene search
GitHub Advisory DatabaseGHSA-5JQP-885W-XJ32HistoryNov 10, 2022 - 12:01 p.m.
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-11-1012:01:17
CWE-1333
GitHub Advisory Database
github.com
8
pymatgen
redos
vulnerability
gaussianinput
from_string
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.8%
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method.
Affected configurations
Node
pymatgenpymatgenRange≤2022.9.21
Related
nessus
nessus
cvelist
cvelist
CVE-2022-42964 Exponential ReDoS in pymatgen leads to denial of service
2022-11-09 00:00:00
osv
osv
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-11-10 12:01:17
ubuntucve
ubuntucve
CVE-2022-42964
2022-11-09 00:00:00
prion
prion
Design/Logic Flaw
2022-11-09 20:15:00
veracode
veracode
Regular Expression Denial Of Service
2022-11-10 12:06:50
cve
cve
CVE-2022-42964
2022-11-09 20:15:09
debiancve
debiancve
CVE-2022-42964
2022-11-09 20:15:09
freebsd
freebsd
py-pymatgen -- regular expression denial of service
2022-11-10 00:00:00
nvd
nvd
CVE-2022-42964
2022-11-09 20:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.8%
Related for GHSA-5JQP-885W-XJ32