vulnerability
Alma Linux: CVE-2020-8492: Moderate: python38:3.8 security, bug fix, and enhancement update (ALSA-2020-4641)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:N/A:C) | Jan 30, 2020 | May 4, 2022 | Nov 14, 2024 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Jan 30, 2020
Added
May 4, 2022
Modified
Nov 14, 2024
Description
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
Solution(s)
alma-upgrade-python38-asn1cryptoalma-upgrade-python38-cffialma-upgrade-python38-chardetalma-upgrade-python38-cryptographyalma-upgrade-python38-cythonalma-upgrade-python38-idnaalma-upgrade-python38-markupsafealma-upgrade-python38-mod_wsgialma-upgrade-python38-psycopg2alma-upgrade-python38-psycopg2-docalma-upgrade-python38-psycopg2-testsalma-upgrade-python38-pycparseralma-upgrade-python38-pysocksalma-upgrade-python38-pytzalma-upgrade-python38-requestsalma-upgrade-python38-scipy
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.