Lucene search
HistoryDec 23, 2022 - 12:15 a.m.
CVE-2022-40898
python packaging authority
pypa wheel
remote attackers
denial of service
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
68.3%
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
Affected configurations
Node
wheel_projectwheelRange<0.38.1python
Related
nessus
nessus
SUSE SLES15 Security Update : python-wheel (SUSE-SU-2023:0088-2)
2023-03-10 00:00:00
EulerOS 2.0 SP11 : python-wheel (EulerOS-SA-2023-1767)
2023-05-08 00:00:00
EulerOS 2.0 SP9 : python-wheel (EulerOS-SA-2023-1852)
2023-05-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5821-3)
2023-03-02 00:00:00
Huawei EulerOS: Security Advisory for python-wheel (EulerOS-SA-2023-1608)
2023-04-13 00:00:00
Huawei EulerOS: Security Advisory for python-wheel (EulerOS-SA-2023-1767)
2023-05-08 00:00:00
osv
osv
PYSEC-2022-43017
2022-12-23 00:15:00
Moderate: python-wheel security update
2023-11-07 00:00:00
wheel vulnerability
2023-01-24 09:21:51
ubuntu
ubuntu
wheel vulnerability
2023-01-24 00:00:00
pip regression
2023-02-28 00:00:00
wheel vulnerability
2023-01-24 00:00:00
almalinux
almalinux
Moderate: python-wheel security update
2023-11-07 00:00:00
cvelist
cvelist
CVE-2022-40898
2022-12-22 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-12-23 06:23:09
cve
cve
CVE-2022-40898
2022-12-23 00:15:14
redhatcve
redhatcve
CVE-2022-40898
2023-01-31 10:35:37
ibm
ibm
amazon
amazon
Medium: python-wheel
2023-11-29 22:20:00
debiancve
debiancve
CVE-2022-40898
2022-12-23 00:15:14
mageia
mageia
Updated python-wheel packages fix security vulnerability
2023-07-07 08:54:45
prion
prion
Input validation
2022-12-23 00:15:00
redhat
redhat
(RHSA-2023:6712) Moderate: python-wheel security update
2023-11-07 06:12:51
(RHSA-2023:6793) Important: rh-python38-python security update
2023-11-08 08:04:01
github
github
pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)
2022-12-23 00:30:23
alpinelinux
alpinelinux
CVE-2022-40898
2022-12-23 00:15:14
cbl_mariner
cbl_mariner
CVE-2022-40898 affecting package python-wheel 0.33.6-7
2024-06-22 21:08:22
oraclelinux
oraclelinux
python-wheel security update
2023-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2022-40898
2022-12-23 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
68.3%
Related for NVD:CVE-2022-40898