CVEvulnerability

CVE-2021-3737

7.5 HIGH Published 2022-03-04 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2022-03-04
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400, CWE-835

Description

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

Affected configurations

• python python (>= 3.6.0 < 3.6.14) • python python (>= 3.7.0 < 3.7.11) • python python (>= 3.8.0 < 3.8.11) • python python (>= 3.9.0 < 3.9.6) • redhat codeready linux builder 8.0 • redhat codeready linux builder for ibm z systems 8.0 • redhat codeready linux builder for power little endian 8.0 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux for ibm z systems 8.0 • redhat enterprise linux for power little endian 8.0 • fedoraproject fedora 33 • fedoraproject fedora 34 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 20.04 • canonical ubuntu linux 21.04 • netapp hci • netapp management services for element software • netapp netapp xcp smb • netapp ontap select deploy administration utility • netapp xcp nfs • oracle communications cloud native core binding support function 22.1.3 • oracle communications cloud native core network exposure function 22.1.1 • oracle communications cloud native core policy 22.2.0

Related

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-835 Loop with Unreachable Exit Condition weakness

References