Lucene search
+L

1057 matches found

OpenVAS
OpenVAS
•added 2023/01/18 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2023:0093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.6AI score0.02503EPSS
SaveExploits1References4
OSV
OSV
•added 2023/01/17 10:01 a.m.•5 views

SUSE-SU-2023:0094-1 Security update for python36-setuptools

This update for python36-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

5.9CVSS6AI score0.02503EPSS
SaveExploits1References3
OSV
OSV
•added 2023/01/17 10:01 a.m.•10 views

SUSE-SU-2023:0093-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

5.9CVSS6AI score0.02503EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2023/01/17 12:00 a.m.•48 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python310-setuptools (SUSE-SU-2023:0091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0091-1 advisory. - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML...

5.9CVSS6.8AI score0.02503EPSS
SaveExploits1References4
OSV
OSV
•added 2023/01/16 10:14 a.m.•8 views

SUSE-SU-2023:0091-1 Security update for python310-setuptools

This update for python310-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document bsc1206667...

5.9CVSS6AI score0.02503EPSS
SaveExploits1References3
CBLMariner
CBLMariner
•added 2023/01/12 8:54 p.m.•19 views

CVE-2022-40897 affecting package python-setuptools 40.2.0-6

CVE-2022-40897 affecting package python-setuptools 40.2.0-6. A patched version of the package is available...

5.9CVSS8.9AI score0.02503EPSS
SaveExploits1
OSV
OSV
•added 2023/01/06 11:05 a.m.•10 views

OESA-2023-1004 python-setuptools security update

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages.This package contains a python wheel of setuptools to use with venv. Security Fixes: Python Packaging...

7.5CVSS8.6AI score0.02503EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2023/01/05 6:35 p.m.•56 views

CVE-2022-40897

A flaw was found in Python Setuptools due to a regular expression Denial of Service ReDoS present in packageindex.py. This issue could allow a remote attacker to cause a denial of service via HTML in a crafted package or custom PackageIndex page...

5.9CVSS5.9AI score0.02503EPSS
SaveExploits1References4
Veracode
Veracode
•added 2022/12/23 8:31 a.m.•85 views

Regular Expression Denial Of Service (ReDoS)

setuptools is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the REL attribute in the findexternallinks function of packageindex.py, allowing an attacker to crash the application by passing a malicious HTML...

5.9CVSS6AI score0.02503EPSS
SaveExploits1References13Affected Software3
Github Security Blog
Github Security Blog
•added 2022/12/23 12:30 a.m.•83 views

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerabl...

5.9CVSS6AI score0.02503EPSS
SaveExploits1References17Affected Software1
OSV
OSV
•added 2022/12/23 12:30 a.m.•15 views

GHSA-R9HX-VWMV-Q579 pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerabl...

8.7CVSS6.8AI score0.02503EPSS
SaveExploits1References17
NVD
NVD
•added 2022/12/23 12:15 a.m.•26 views

CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS0.02503EPSS
SaveExploits1References10
OSV
OSV
•added 2022/12/23 12:15 a.m.•5 views

DEBIAN-CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS6.7AI score0.02503EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/23 12:15 a.m.•32 views

Denial of service

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

2.6CVSS5.7AI score0.02503EPSS
SaveExploits1References8Affected Software1
OSV
OSV
•added 2022/12/23 12:15 a.m.•77 views

PYSEC-2022-43012

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS6.9AI score0.02503EPSS
SaveExploits1References6
PyPA
PyPA
•added 2022/12/23 12:15 a.m.•12 views

PYSEC-2022-43012

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS6.7AI score0.02503EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/12/23 12:15 a.m.•13 views

UBUNTU-CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS6.8AI score0.02503EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/12/23 12:00 a.m.•8 views

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Python Packaging Authority PyPA setuptools version 65.3.0 and earlier. A...

5.9CVSS7.3AI score0.02503EPSS
SaveExploits1References22
UbuntuCve
UbuntuCve
•added 2022/12/23 12:00 a.m.•276 views

CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

5.9CVSS6.8AI score0.02503EPSS
SaveExploits1References5
FreeBSD
FreeBSD
•added 2022/12/23 12:00 a.m.•27 views

py27-setuptools44 -- denial of service vulnerability

SCH227 reports: Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page du...

5.9CVSS6.2AI score0.02503EPSS
SaveExploits1References1
Rows per page
Query Builder