Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2023/04/14 12:0 a.m.28 views

FreeBSD : py39-py -- Regular expression Denial of Service vulnerability (28a37df6-ba1a-4eed-bb64-623fc8e8dfd0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 28a37df6-ba1a-4eed-bb64-623fc8e8dfd0 advisory. - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expressio...

7.5CVSS6.6AI score0.00131EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/10/16 12:0 p.m.147 views

Withdrawn Advisory: ReDoS in py library when used with subversion

Withdrawn Advisory This advisory has been withdrawn because evidence does not suggest that CVE-2022-42969 is a valid, reproducible vulnerability. This link is maintained to preserve external references. Original Description The py library through 1.11.0 for Python allows remote attackers to condu...

7.5CVSS5.8AI score0.00131EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2022/10/16 6:15 a.m.27 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS5.3AI score
Exploits0References4
Prion
Prion
added 2022/10/16 6:15 a.m.9 views

Code injection

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

5CVSS7.4AI score0.00131EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2022/10/16 12:0 a.m.342 views

CVE-2022-42969

CVE-2022-42969 affects the Python package py (through 1.11.0). The vulnerability allows a remote ReDoS via a crafted InfoSvnCommand argument in a Subversion repository, caused by mishandling of the info data, per connected IBM security bulletin. The description notes that this issue has been disp...

7.5CVSS7.3AI score0.00131EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/16 12:0 a.m.3 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.5AI score0.00131EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/10/16 12:0 a.m.2 views

PT-2022-26687

Name of the Vulnerable Software and Affected Versions py versions through 1.11.0 Description The py library allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

8.7CVSS7.2AI score0.00131EPSS
Exploits1References47
Rows per page
Query Builder