Linux Distros Unpatched Vulnerability : CVE-2019-1010083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data...

SUSE SLES12 Security Update : python-Flask (SUSE-SU-2023:1928-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1928-1 advisory. - CVE-2019-1010083: Fixed DoS via crafted encoded JSON data bsc1141968. Tenable has extracted the preceding description block directly from...

SUSE-SU-2023:1928-1 Security update for python-Flask

This update for python-Flask fixes the following issues: - CVE-2019-1010083: Fixed DoS via crafted encoded JSON data bsc1141968...

alignak-backend (>=1.4.15, <=1.4.16), alignak-webui (>=0.11.1, <=0.12.2) +11 more potentially affected by CVE-2019-1010083 via flask (0.12.0)

flask PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - alignak-backend =1.4.15, =0.11.1, =0.1.0, =0.5.0, =1.0.8, =4.5.0, =0.2.0.dev0, =0.2.0, =23.1.0, =1.0.2, =1.0.5 - showcase 0.3.4 Source cves:...

autologin (>=0.1.1, <=0.1.3), cabu (0.0.2) +20 more potentially affected by CVE-2019-1010083 via flask (0.10.1)

flask PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - autologin =0.1.1, =1.2.1, =2.2.11, =0.5.0, =0.1.0, =0.0.1, =0.3.1, =0.6.2, =0.0.1, =0.0.1, =0.1.12 and more Source cves: CVE-2019-1010083 Source...

allennlp (>=0.4.0, <=0.4.1), bentodev (>=0.1.17, <=2018.11.2) +7 more potentially affected by CVE-2019-1010083 via flask (0.12.1)

flask PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - allennlp =0.4.0, =0.1.17, =0.1.0, =0.9.2, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2019-1010083 Source advisory:...

almanach (>=4.0.0, <=4.1.0), alo7-airflow (>=1.10.0, <=1.10.0.7) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.5)

flask PYPI version 0.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - almanach =4.0.0, =1.10.0, =0.14.0, =1.0.18, =0.1.0, =0.0.1a0, =0.0.3a0, =3.0.0, =0.1.0, =0.2.1 and more Source cves: CVE-2019-1010083 Source advisory...

aequitas (>=0.26.0, <=0.42.0), appkernel (>=0.1.0, <=1.0.0) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.2)

flask PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aequitas =0.26.0, =0.1.0, =0.7.1, =0.1.0, =0.0.1, =0.0.5.1, =0.0.2, =0.1.1, =0.12.0, =2.10.60, =0.1.0, =0.2.0, =1.1.0, =1.2.0 and more Source cves:...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

add-dependencies (2.3.0) potentially affected by CVE-2019-1010083 via flask (0.5.0)

flask PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - add-dependencies 2.3.0 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

almanach (>=4.0.0, <=4.1.0), alo7-airflow (>=1.10.0, <=1.10.0.7) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.5)

flask PYPI version 0.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - almanach =4.0.0, =1.10.0, =0.14.0, =1.0.18, =0.1.0, =0.0.1a0, =0.0.3a0, =3.0.0, =0.1.0, =0.2.1 and more Source cves: CVE-2019-1010083 Source advisory...

allennlp (>=0.4.0, <=0.4.1), bentodev (>=0.1.17, <=2018.11.2) +7 more potentially affected by CVE-2019-1010083 via flask (0.12.1)

flask PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - allennlp =0.4.0, =0.1.17, =0.1.0, =0.9.2, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2019-1010083 Source advisory:...

vuln-repo (>=0.0.2, <=0.0.4) potentially affected by CVE-2019-1010083 via flask (0.6.1)

flask PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - vuln-repo =0.0.2, =0.0.4 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

aequitas (>=0.26.0, <=0.42.0), appkernel (>=0.1.0, <=1.0.0) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.2)

flask PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aequitas =0.26.0, =0.1.0, =0.7.1, =0.1.0, =0.0.1, =0.0.5.1, =0.0.2, =0.1.1, =0.12.0, =2.10.60, =0.1.0, =0.2.0, =1.1.0, =1.2.0 and more Source cves:...

gief (0.0.3), larigira (>=0.2.0, <=1.3.3) +1 more potentially affected by CVE-2019-1010083 via flask (0.11.0)

flask PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - gief 0.0.3 - larigira =0.2.0, =0.0.11, =1.0.5 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

CVE-2019-1010083

CVE-2019-1010083 affects the Pallets Project Flask before 1.0, where crafted encoded JSON data can cause unexpected memory usage leading to denial of service. The fix is upgrading to Flask 1.0 (or later). This entry may overlap with CVE-2018-1000656 per multiple sources.

abbr (0.0.0), add-dependencies (2.3.0) +158 more potentially affected by CVE-2019-1010083 via flask (>=0.5.0, <=0.12.5)

flask PYPI version =0.5.0, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =4.0.0, =1.10.0, =0.1.0, =0.14.0, =0.1.1, =0.1.17, =0.1.0, =1.0.0 - blendedux 0.0.2 and more Source cves: CVE-2019-1010083 Source advisory: MEND:CVE-2019-1010083...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...