An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-wheel-wheelUpgrade python3-wheel | Nov 16, 2023 | Dec 23, 2022 |
| Alpine Linux | — | Upgrade py3-wheel | Mar 21, 2024 | Dec 22, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-wheelUpgrade python2-wheelUpgrade python-wheel-wheel | Dec 5, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade wheel | Jul 30, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-wheel-wheel | May 18, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-wheel-wheel | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-wheel-wheel | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-wheel-wheel | May 10, 2023 | Dec 23, 2022 |
| Oracle_linux | — | Upgrade python3-wheel-wheelUpgrade python3-wheel | Nov 16, 2023 | Dec 21, 2022 |
| Redhat_linux | — | Upgrade rhc-worker-playbookUpgrade python3-wheelUpgrade rhc-worker-playbook-debuginfoNo solution existsUpgrade python3-wheel-wheel | Dec 15, 2023 | Dec 23, 2022 |
| Suse | — | Upgrade python-wheelUpgrade python3-wheel | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python-pip-whlUpgrade python-pip (Ubuntu Pro)Upgrade python-pipUpgrade python3-wheelUpgrade python3-pip-whlUpgrade python3-pipUpgrade python3-wheel (Ubuntu Pro)Upgrade python-wheel (Ubuntu Pro)Upgrade python3-pip (Ubuntu Pro)Upgrade python-wheelUpgrade python-pip-whl (Ubuntu Pro) | Jan 24, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub