Lucene search
Redhat.comRH:CVE-2023-26112HistoryApr 03, 2023 - 1:14 p.m.
CVE-2023-26112
2023-04-0313:14:12
redhat.com
access.redhat.com
20
python-configobj
validator function
regular expression denial of service
server side configuration file
cve-2023-26112
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.0%
A flaw was found in python-configobj via the Validator function at python-configobj/validate.py. This issue only occurs in the case of a developer putting the offending value in a server side configuration file, which could lead to a Regular Expression Denial of Service (ReDoS).
Related
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-64b2965699)
2023-11-05 00:00:00
osv
osv
CGA-9r88-r9jr-p44c
2024-06-06 12:25:29
prion
prion
Design/Logic Flaw
2023-04-03 05:15:00
nessus
nessus
Fedora 37 : python-configobj (2023-62baa45349)
2023-10-18 00:00:00
EulerOS 2.0 SP5 : python-configobj (EulerOS-SA-2024-1161)
2024-02-08 00:00:00
Amazon Linux 2 : python-configobj (ALAS-2023-2188)
2023-08-14 00:00:00
cvelist
cvelist
CVE-2023-26112
2023-04-03 05:00:01
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-04-10 09:02:02
freebsd
freebsd
py39-configobj -- vulnerable to Regular Expression Denial of Service
2023-04-03 00:00:00
Configobj -- Regular Expression Denial of Service attack
2023-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: python-configobj-5.0.8-6.fc39
2023-11-03 18:55:49
[SECURITY] Fedora 37 Update: python-configobj-5.0.8-6.fc37
2023-10-18 01:29:01
[SECURITY] Fedora 38 Update: python-configobj-5.0.8-6.fc38
2023-10-18 01:47:11
cve
cve
CVE-2023-26112
2023-04-03 05:15:07
github
github
ibm
ibm
redos
redos
ROS-20240911-08
2024-09-11 00:00:00
nvd
nvd
CVE-2023-26112
2023-04-03 05:15:07
debiancve
debiancve
CVE-2023-26112
2023-04-03 05:15:07
ubuntucve
ubuntucve
CVE-2023-26112
2023-04-03 00:00:00
amazon
amazon
Low: python-configobj
2023-08-03 18:10:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
50.0%
Related for RH:CVE-2023-26112