Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

🗓️ 07 May 2021 15:50:36Reported by GitHub Advisory DatabaseType

Improper Handling of Highly Compressed Data and Memory Allocation in Eventlet for Websocke

Reporter	Title	Published	Views	Family All 77
Tenable Nessus	Aruba ClearPass Policy Manager <= 6.x.x < 6.8.9-HF2 / 6.9.x < 6.9.9 / 6.10.x < 6.10.4 Multiple Vulnerabilities	31 May 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	27 Jul 202100:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenStack Platform 16.1 (python-eventlet) (RHSA-2021:5071)	11 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 9 : OpenShift Container Platform 4.12.41 (RHSA-2023:6128)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenStack Platform 17.1 (python-eventlet) (RHSA-2024:0188)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 9 : Red Hat OpenStack Platform 17.1 (python-eventlet) (RHSA-2024:0213)	16 Jan 202400:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.8.2 (RHSA-2021:2437)	6 May 202600:00	–	nessus
Tenable Nessus	RHCOS 9 : OpenShift Container Platform 4.12.41 (RHSA-2023:6128)	4 May 202600:00	–	nessus
Tenable Nessus	Splunk Enterprise 8.1 < 8.1.13, 8.2.0 < 8.2.10, 9.0.0 < 9.0.4 (SVD-2023-0215)	2 May 202400:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS : Eventlet vulnerability (USN-4956-1)	17 May 202100:00	–	nessus

Vulners

Node

eventlet eventletRange0.10–0.31.0pip

Source	Link
github	www.github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21419
github	www.github.com/eventlet/eventlet/commit/1412f5e4125b4313f815778a1acb4d3336efcd07
github	www.github.com/pypa/advisory-database/tree/main/vulns/eventlet/PYSEC-2021-12.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2WJFSBPLCNSZNHYQC4QDRDFRTEZRMD2L
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/R5JZP4LZOSP7CUAM3GIRW6PIAWKH5VGB
github	www.github.com/advisories/GHSA-9p9m-jm8w-94p2

20 Sep 2024 17:20Current

1.5Low risk

Vulners AI Score1.5

CVSS 25

CVSS 3.15.3

EPSS0.01792