Lucene search

K
redosRedosROS-20240905-02
HistorySep 05, 2024 - 12:00 a.m.

ROS-20240905-02

2024-09-0500:00:00
redos.red-soft.ru
2
cpython
vulnerability
email headers
serialization
denial of service
remote attack
unix

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

6.7

Confidence

High

A vulnerability in the Python programming language interpreter (CPython) is related to incorrectly enclosing newline characters in quotation marks for email headers when serializing a message.
newline quotes for email headers when serializing a message. Exploitation
vulnerability could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64python3< 3.8.19-6UNKNOWN

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

6.7

Confidence

High