A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

References

bugs.python.org/issue44022

bugzilla.redhat.com/show_bug.cgi?id=1995162

github.com/python/cpython/pull/25916

github.com/python/cpython/pull/26503

lists.debian.org/debian-lts-announce/2023/05/msg00024.html

lists.debian.org/debian-lts-announce/2023/06/msg00039.html

python-security.readthedocs.io/vuln/urllib-100-continue-loop.html

security.netapp.com/advisory/ntap-20220407-0009/

ubuntu.com/security/CVE-2021-3737

www.oracle.com/security-alerts/cpujul2022.html

cbl_mariner 1

veracode 1

redhatcve 1

osv 18

ibm 10

ubuntucve 1

nvd 1

nessus 67

hackerone 1

ubuntu 4

openvas 43

cloudlinux 1

prion 1

cvelist 1

debiancve 1

cve 1

fedora 4

oraclelinux 4

redhat 16

suse 4

debian 3

almalinux 4

photon 3

cloudfoundry 1

mageia 2

rocky 3

amazon 2

cbl_mariner

CVE-2021-3737 affecting package python3 3.7.10-7

2022-04-07 06:04:03

veracode

Denial Of Service (DoS)

2021-09-26 11:39:17

redhatcve

CVE-2021-3737

2021-08-26 08:00:05

osv

CVE-2021-3737: urllib HTTP client possible infinite loop on a 100 Continue response

2022-03-04 00:00:00

BIT-python-2021-3737

2024-03-06 11:06:04

python3.8, python3.9 vulnerabilities

2021-12-17 15:10:44

ibm

Security Bulletin: A Python Issue Affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

2023-01-12 21:59:00

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python (CVE-2021-3737)

2023-01-12 21:59:00

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Python

2022-06-29 02:19:10

ubuntucve

CVE-2021-3737

2021-08-31 00:00:00

nvd

CVE-2021-3737

2022-03-04 19:15:08

nessus

Photon OS 3.0: Python3 PHSA-2022-3.0-0375

2024-07-24 00:00:00

Ubuntu 20.04 LTS : Python vulnerabilities (USN-5201-1)

2023-10-23 00:00:00

Python < 3.6.14 / 3.7.11 / 3.8.11 / 3.9.6 DoS

2021-12-20 00:00:00

hackerone

Internet Bug Bounty: "urllib" will result to deny of service

2021-05-07 17:14:22

ubuntu

Python vulnerabilities

2021-12-17 00:00:00

Python vulnerabilities

2021-12-17 00:00:00

Python vulnerabilities

2021-09-16 00:00:00

openvas

Ubuntu: Security Advisory (USN-5201-1)

2021-12-18 00:00:00

Python DoS Vulnerability (bpo-44022) - Linux

2022-03-08 00:00:00

Python DoS Vulnerability (bpo-44022) - Windows

2022-03-08 00:00:00

cloudlinux

Fix of CVE: CVE-2021-3737

2022-03-22 14:15:13

prion

Design/Logic Flaw

2022-03-04 19:15:00

cvelist

CVE-2021-3737

2022-03-04 00:00:00

debiancve

CVE-2021-3737

2022-03-04 19:15:08

cve

CVE-2021-3737

2022-03-04 19:15:08

fedora

[SECURITY] Fedora 34 Update: python2.7-2.7.18-15.fc34

2021-09-29 01:10:03

[SECURITY] Fedora 35 Update: python2.7-2.7.18-15.fc35

2021-09-24 20:59:13

[SECURITY] Fedora 34 Update: mingw-python3-3.9.4-3.fc34

2021-09-30 01:15:07

oraclelinux

python3 security update

2022-05-17 00:00:00

python38:3.8 and python38-devel:3.8 security update

2022-05-17 00:00:00

python27:2.7 security update

2022-05-17 00:00:00

redhat

(RHSA-2022:1986) Moderate: python3 security update

2022-05-10 08:11:33

(RHSA-2022:1764) Moderate: python38:3.8 and python38-devel:3.8 security update

2022-05-10 06:23:23

(RHSA-2022:1663) Moderate: python27-python and python27-python-pip security update

2022-05-02 07:48:36

suse

Security update for python (moderate)

2021-10-20 00:00:00

Security update for python (moderate)

2021-10-31 00:00:00

Security update for python3 (moderate)

2021-12-16 00:00:00

debian

[SECURITY] [DLA 2808-1] python3.5 security update

2021-11-05 09:21:01

[SECURITY] [DLA 3477-1] python3.7 security update

2023-06-30 20:52:04

[SECURITY] [DLA 3432-1] python2.7 security update

2023-05-24 17:31:47

almalinux

Moderate: python3 security update

2022-05-10 08:11:33

Moderate: python38:3.8 and python38-devel:3.8 security update

2022-05-10 06:23:23

Moderate: python27:2.7 security update

2022-05-10 08:02:50

photon

Important Photon OS Security Update - PHSA-2022-0461

2022-04-06 00:00:00

Critical Photon OS Security Update - PHSA-2022-0375

2022-03-26 00:00:00

Critical Photon OS Security Update - PHSA-2022-3.0-0375

2022-03-26 00:00:00

cloudfoundry

USN-5199-1: Python vulnerabilities | Cloud Foundry

2022-03-08 00:00:00

mageia

Updated python packages fix security vulnerability

2021-10-02 21:57:04

Updated python3 packages fix security vulnerability

2021-09-23 07:49:29

rocky

python38:3.8 and python38-devel:3.8 security update

2022-05-10 06:23:23

python27:2.7 security update

2022-05-10 08:02:50

python39:3.9 and python39-devel:3.9 security update

2021-11-09 08:26:25

amazon

Medium: python27

2022-05-31 23:47:00

Medium: python

2022-05-31 23:50:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

AI Score

Confidence

Low

EPSS

0.016

Percentile

87.3%

JSON

Related for OSV:CVE-2021-3737