Lucene search
GoogleOSV:GHSA-5JQP-885W-XJ32HistoryNov 10, 2022 - 12:01 p.m.
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-11-1012:01:17
Google
osv.dev
8
pymatgen
vulnerability
redos
gaussianinput from_string
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.8%
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method.
Related
nessus
nessus
cvelist
cvelist
CVE-2022-42964 Exponential ReDoS in pymatgen leads to denial of service
2022-11-09 00:00:00
ubuntucve
ubuntucve
CVE-2022-42964
2022-11-09 00:00:00
prion
prion
Design/Logic Flaw
2022-11-09 20:15:00
veracode
veracode
Regular Expression Denial Of Service
2022-11-10 12:06:50
cve
cve
CVE-2022-42964
2022-11-09 20:15:09
debiancve
debiancve
CVE-2022-42964
2022-11-09 20:15:09
freebsd
freebsd
py-pymatgen -- regular expression denial of service
2022-11-10 00:00:00
github
github
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
2022-11-10 12:01:17
nvd
nvd
CVE-2022-42964
2022-11-09 20:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
36.8%
Related for OSV:GHSA-5JQP-885W-XJ32