Lucene search
K

28 matches found

Github Security Blog
Github Security Blog
added 2022/11/10 12:1 p.m.21 views

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

7.5CVSS7.3AI score0.00162EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/11/10 12:1 p.m.1 views

GHSA-4R6J-FWCX-94CF snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

5.9CVSS7.2AI score0.00162EPSS
Exploits1References6
Veracode
Veracode
added 2022/11/10 1:49 a.m.17 views

Regular Expression Denial Of Service (ReDoS)

snowflake-connector-python is vulnerable to regular expression denial of service. The vulnerability is due to the getfiletransfertype function in cursor.py which does not properly validate the SQL queries, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.4AI score0.00162EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/11/09 8:15 p.m.9 views

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

7.5CVSS0.00162EPSS
Exploits1References1
Prion
Prion
added 2022/11/09 8:15 p.m.15 views

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

5CVSS7.5AI score0.00162EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/11/09 12:0 a.m.110 views

CVE-2022-42965

CVE-2022-42965 affects the Python Snowflake connector (snowflake-connector-python). The vulnerability is an exponential ReDoS in the undocumented get_file_transfer_type method, allowing a network attacker to trigger a denial of service by supplying crafted input. Underlying cause: a vulnerable re...

7.5CVSS5.8AI score0.00162EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/09 12:0 a.m.8 views

CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

3.7CVSS6.9AI score0.00162EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/11/09 12:0 a.m.13 views

CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

3.7CVSS7.7AI score0.00162EPSS
Exploits1References1
Rows per page
Query Builder