feedparser vulnerability

2012-05-2200:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.034

Percentile

91.5%

JSON

Releases

Ubuntu 12.04

Packages

feedparser - Universal Feed Parser for Python

Details

It was discovered that feedparser did not properly sanitize ENTITY
declarations in encoded fields. A remote attacker could exploit this to
cause a denial of service via memory exhaustion.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchpython3-feedparser< 5.1-0ubuntu3.1UNKNOWN
Ubuntu12.04noarchpython-feedparser< 5.1-0ubuntu3.1UNKNOWN