Lucene search
Veracode Vulnerability DatabaseVERACODE:33511HistoryJan 05, 2022 - 3:41 a.m.
Regular Expression Denial Of Service (ReDoS)
2022-01-0503:41:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
34.6%
nltk is vulnerable to regular expression denial of service. The vulnerability exists due to the inefficient regex pattern used in malt_regex_tagger function of malt.py and get_pos_tagger function of glue.py, allowing an attacker to cause an application crash by providing malicious payload against RegexpTagger.
Related
cvelist
cvelist
CVE-2021-3842 Inefficient Regular Expression Complexity in nltk/nltk
2022-01-04 14:50:09
debiancve
debiancve
CVE-2021-3842
2022-01-04 15:15:07
osv
osv
NLTK Vulnerable to REDoS
2022-01-06 22:24:14
CVE-2021-3842
2022-01-04 15:15:07
PYSEC-2022-5
2022-01-04 15:15:00
nvd
nvd
CVE-2021-3842
2022-01-04 15:15:07
ubuntucve
ubuntucve
CVE-2021-3842
2022-01-04 00:00:00
huntr
huntr
Inefficient Regular Expression Complexity in nltk/nltk
2021-12-07 12:51:51
prion
prion
Design/Logic Flaw
2022-01-04 15:15:00
github
github
NLTK Vulnerable to REDoS
2022-01-06 22:24:14
cve
cve
CVE-2021-3842
2022-01-04 15:15:07