CVE-2024-49769

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

PYSEC-2024-211

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +267 more potentially affected by CVE-2024-49769 via waitress (>=0.8.10 <=3.0.0)

waitress PYPI version =0.8.10, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =1.0.2, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.1.7 and more Source cves: CVE-2024-49769 Source advisory: OSV:PYSEC-2024-211...

PYSEC-2024-211

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

AZL-51831 CVE-2024-49769 affecting package python-waitress for versions less than 3.0.1-1

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

AZL-51822 CVE-2024-49769 affecting package python-waitress 1.4.4-7

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

DEBIAN-CVE-2024-49769

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +213 more potentially affected by CVE-2024-49768 via waitress (>=2.0.0 <=3.0.0)

waitress PYPI version =2.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.0.4, =0.1.0 - brython-components =0.3.1 and more Source cves: CVE-2024-49768 Source advisory: OSV:PYSEC-2024-210...

PYSEC-2024-210

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

AZL-57396 CVE-2024-49768 affecting package python-waitress 3.0.1-1

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

CVE-2024-49768

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

PYSEC-2024-210

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

DEBIAN-CVE-2024-49768

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

CVE-2024-49769

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

UBUNTU-CVE-2024-49768

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

UBUNTU-CVE-2024-49769

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +213 more potentially affected by CVE-2024-49768 via waitress (>=2.0.0 <=3.0.0)

waitress PYPI version =2.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.0.4, =0.1.0 - brython-components =0.3.1 and more Source cves: CVE-2024-49768 Source advisory: OSV:GHSA-9298-4CF8-G4WJ...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +213 more potentially affected by CVE-2024-49768 via waitress (>=2.0.0 <=3.0.0)

waitress PYPI version =2.0.0, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.0.4, =0.1.0 - brython-components =0.3.1 and more Source cves: CVE-2024-49768 Source advisory: SNYK:PYTHON-WAITRESS-8309636...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview waitress is a production-quality pure-Python WSGI server with very acceptable performance. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in HTTP pipelining when handling an invalid initial request. An attacker can exploit this...

GHSA-9298-4CF8-G4WJ Waitress has request processing race condition in HTTP pipelining with invalid first request

Impact A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the first request fails due to a parsing error, we simply close th...