Lucene search

K
osvGoogleOSV:PSF-2019-1
HistoryJun 03, 2019 - 7:04 p.m.

smtplib unlimited read

2019-06-0319:04:24
Google
osv.dev
5

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

The smtplib module doesnโ€™t limit the amount of read data in
its call to readline(). An erroneous or malicious SMTP server can trick the
smtplib module to consume large amounts of memory.