Lucene search
GoogleOSV:PYSEC-2022-43012HistoryDec 23, 2022 - 12:15 a.m.
PYSEC-2022-43012
2022-12-2300:15:00
Google
osv.dev
295
0.005 Low
EPSS
Percentile
75.3%
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
| CPE | Name | Operator | Version |
|---|---|---|---|
| setuptools | eq | 16.0 | |
| setuptools | eq | 11.3.1 | |
| setuptools | eq | 14.2 | |
| setuptools | eq | 63.1.0 | |
| setuptools | eq | 10.0.1 | |
| setuptools | eq | 46.3.0 | |
| setuptools | eq | 0.9.6 | |
| setuptools | eq | 8.1 | |
| setuptools | eq | 30.4.0 | |
| setuptools | eq | 59.4.0 |
References
github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200
github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
github.com/pypa/setuptools/compare/v65.5.0...v65.5.1
pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
pyup.io/vulnerabilities/CVE-2022-40897/52495/
Related
nessus
nessus
Rocky Linux 9 : python-setuptools (RLSA-2023:0952)
2023-04-06 00:00:00
Fedora 36 : python-setuptools (2023-9992b32c1f)
2023-04-29 00:00:00
rocky
rocky
python-setuptools security update
2023-02-22 01:08:44
python-setuptools security update
2023-04-06 15:53:31
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to python vulnerability ( CVE-2022-40897 )
2023-12-06 15:45:33
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-12-23 08:31:40
fedora
fedora
[SECURITY] Fedora 36 Update: python-setuptools-59.6.0-4.fc36
2023-04-30 01:24:06
[SECURITY] Fedora 37 Update: python-setuptools-62.6.0-3.fc37
2023-05-01 01:29:09
openvas
openvas
Ubuntu: Security Advisory (USN-5817-1)
2023-01-24 00:00:00
openSUSE: Security Advisory for python3 (SUSE-SU-2023:4517-1)
2024-03-04 00:00:00
amazon
amazon
Medium: python2-setuptools
2023-03-02 22:35:00
Medium: python-setuptools
2023-08-03 18:10:00
oraclelinux
oraclelinux
python-setuptools security update
2023-02-22 00:00:00
python3-setuptools security update
2023-05-23 00:00:00
python-setuptools security update
2023-02-28 00:00:00
osv
osv
Moderate: python-setuptools security update
2023-02-28 00:00:00
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
Moderate: python-setuptools security update
2023-04-06 15:53:31
almalinux
almalinux
Moderate: python-setuptools security update
2023-02-21 00:00:00
Moderate: python-setuptools security update
2023-02-28 00:00:00
redhat
redhat
(RHSA-2023:0835) Moderate: python-setuptools security update
2023-02-21 08:46:22
(RHSA-2023:0952) Moderate: python-setuptools security update
2023-02-28 07:52:59
(RHSA-2023:7395) Moderate: python-setuptools security update
2023-11-21 09:47:07
redhatcve
redhatcve
CVE-2022-40897
2023-01-05 18:35:06
freebsd
freebsd
py39-setuptools58 -- denial of service vulnerability
2022-12-23 00:00:00
py39-setuptools -- denial of service vulnerability
2022-12-23 00:00:00
py27-setuptools44 -- denial of service vulnerability
2022-12-23 00:00:00
github
github
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
cvelist
cvelist
CVE-2022-40897
2022-12-22 00:00:00
ubuntu
ubuntu
Setuptools vulnerability
2023-01-23 00:00:00
cve
cve
CVE-2022-40897
2022-12-23 00:15:00
mageia
mageia
Updated python-setuptools packages fix security vulnerability
2023-07-07 08:54:45
gentoo
gentoo
Setuptools: Denial of Service
2024-05-05 00:00:00
prion
prion
Denial of service
2022-12-23 00:15:00
redos
redos
ROS-20230428-05
2023-04-28 00:00:00
debiancve
debiancve
CVE-2022-40897
2022-12-23 00:15:00
cbl_mariner
cbl_mariner
CVE-2022-40897 affecting package python-setuptools 40.2.0-6
2023-01-12 20:54:53
cloudfoundry
cloudfoundry
USN-5817-1: Setuptools vulnerability | Cloud Foundry
2023-02-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-40897
2022-12-23 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0427
2023-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00