Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

🗓️ 04 Nov 2020 01:19:50Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 4 Views

Python vulnerability in AbstractBasicAuthHandler allows ReDoS via regular expression backtracking.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ibm		Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus
6 May 202202:35
–ibm
ibm		Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak
18 Oct 202214:58
–ibm
ibm		Security Bulletin: Security vulnerabilities in Python3 affect IBM Cloud Pak for Multicloud Management Hybrid GRC.
4 Feb 202121:29
–ibm
ibm		Security Bulletin: Streams service for IBM Cloud Pak for Data might be affected by some underlying Python vulnerabilities
16 Jun 202119:01
–ibm
ibm		Security Bulletin: Vulnerability in Open Source Python affect IBM Tivoli Application Dependency Discovery Manager (CVE-2020-8492)
27 Apr 202120:49
–ibm
ibm		Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
3 Dec 202118:52
–ibm
ibm		Security Bulletin: IBM Cognos Analytics with Watson 11.2.1 has addressed multiple vulnerabilities
14 Oct 202121:21
–ibm
ibm		Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
27 Jan 202100:04
–ibm
freebsd		Python -- multiple vulnerabilities
19 Aug 202000:00
–freebsd
freebsd		Python -- Regular Expression DoS attack against client
17 Nov 201900:00
–freebsd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux8aarch64platform-python3.6.8-31.el8platform-python-3.6.8-31.el8.aarch64.rpm
Red Hat Enterprise Linux8i686platform-python3.6.8-31.el8platform-python-3.6.8-31.el8.i686.rpm
Red Hat Enterprise Linux8ppc64leplatform-python3.6.8-31.el8platform-python-3.6.8-31.el8.ppc64le.rpm
Red Hat Enterprise Linux8s390xplatform-python3.6.8-31.el8platform-python-3.6.8-31.el8.s390x.rpm
Red Hat Enterprise Linux8x86_64platform-python3.6.8-31.el8platform-python-3.6.8-31.el8.x86_64.rpm
Red Hat Enterprise Linux8aarch64platform-python-debug3.6.8-31.el8platform-python-debug-3.6.8-31.el8.aarch64.rpm
Red Hat Enterprise Linux8i686platform-python-debug3.6.8-31.el8platform-python-debug-3.6.8-31.el8.i686.rpm
Red Hat Enterprise Linux8ppc64leplatform-python-debug3.6.8-31.el8platform-python-debug-3.6.8-31.el8.ppc64le.rpm
Red Hat Enterprise Linux8s390xplatform-python-debug3.6.8-31.el8platform-python-debug-3.6.8-31.el8.s390x.rpm
Red Hat Enterprise Linux8x86_64platform-python-debug3.6.8-31.el8platform-python-debug-3.6.8-31.el8.x86_64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Jun 2026 09:06Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.16.5
CVSS 27.1
EPSS0.06681
CWE-400
python vulnerabilityregular expression backtrackingauthentication handlerdenial of serviceunix
4