Maple Labs

CVE search · CVE-2021-3737

CVE-2021-3737

high 7.5

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
secalert@redhat.com
Weakness
CWE-835, CWE-400

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary
CVSS 2.0 high 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • python · python
  • redhat · codeready_linux_builder
  • redhat · codeready_linux_builder_for_ibm_z_systems
  • redhat · codeready_linux_builder_for_power_little_endian
  • redhat · enterprise_linux
  • redhat · enterprise_linux_for_ibm_z_systems
  • redhat · enterprise_linux_for_power_little_endian
  • fedoraproject · fedora
  • canonical · ubuntu_linux
  • netapp · hci
  • netapp · management_services_for_element_software
  • netapp · netapp_xcp_smb
  • netapp · ontap_select_deploy_administration_utility
  • netapp · xcp_nfs
  • oracle · communications_cloud_native_core_binding_support_function
  • oracle · communications_cloud_native_core_network_exposure_function
  • oracle · communications_cloud_native_core_policy

References