The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-eventlet | Jul 30, 2024 | May 7, 2021 |
| Redhat Openshift | — | Upgrade python-eventlet | Jul 29, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade python3-eventlet | May 18, 2021 | May 7, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub