There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.
When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python3.11alma-upgrade-python3.11-debugalma-upgrade-python3.11-develalma-upgrade-python3.11-idlealma-upgrade-python3.11-libsalma-upgrade-python3.11-testalma-upgrade-python3.11-tkinteralma-upgrade-python3.12alma-upgrade-python3.12-debugalma-upgrade-python3.12-develalma-upgrade-python3.12-idlealma-upgrade-python3.12-libsalma-upgrade-python3.12-testalma-upgrade-python3.12-tkinter | Apr 9, 2025 | Aug 19, 2024 | |
| Alpine Linux | alpine-linux-upgrade-python3alpine-linux-upgrade-py3-tornado | Oct 1, 2024 | Aug 19, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pythonamazon-linux-ami-2-upgrade-python-debugamazon-linux-ami-2-upgrade-python-debuginfoamazon-linux-ami-2-upgrade-python-develamazon-linux-ami-2-upgrade-python-libsamazon-linux-ami-2-upgrade-python-testamazon-linux-ami-2-upgrade-python-toolsamazon-linux-ami-2-upgrade-python3amazon-linux-ami-2-upgrade-python3-debugamazon-linux-ami-2-upgrade-python3-debuginfoamazon-linux-ami-2-upgrade-python3-develamazon-linux-ami-2-upgrade-python3-libsamazon-linux-ami-2-upgrade-python3-testamazon-linux-ami-2-upgrade-python3-tkinteramazon-linux-ami-2-upgrade-python3-toolsamazon-linux-ami-2-upgrade-python38amazon-linux-ami-2-upgrade-python38-debugamazon-linux-ami-2-upgrade-python38-debuginfoamazon-linux-ami-2-upgrade-python38-develamazon-linux-ami-2-upgrade-python38-libsamazon-linux-ami-2-upgrade-python38-testamazon-linux-ami-2-upgrade-python38-tkinteramazon-linux-ami-2-upgrade-python38-toolsamazon-linux-ami-2-upgrade-tkinter | Nov 14, 2024 | Aug 19, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3amazon-linux-2023-upgrade-python3-11amazon-linux-2023-upgrade-python3-11-debugamazon-linux-2023-upgrade-python3-11-debuginfoamazon-linux-2023-upgrade-python3-11-debugsourceamazon-linux-2023-upgrade-python3-11-develamazon-linux-2023-upgrade-python3-11-idleamazon-linux-2023-upgrade-python3-11-libsamazon-linux-2023-upgrade-python3-11-testamazon-linux-2023-upgrade-python3-11-tkinteramazon-linux-2023-upgrade-python3-9-debuginfoamazon-linux-2023-upgrade-python3-9-debugsourceamazon-linux-2023-upgrade-python3-debugamazon-linux-2023-upgrade-python3-develamazon-linux-2023-upgrade-python3-idleamazon-linux-2023-upgrade-python3-libsamazon-linux-2023-upgrade-python3-testamazon-linux-2023-upgrade-python3-tkinteramazon-linux-2023-upgrade-python-unversioned-command | Feb 17, 2025 | Aug 19, 2024 | |
| Debian | debian-upgrade-pypy3debian-upgrade-python3-11debian-upgrade-python3-9 | Dec 9, 2024 | Aug 19, 2024 | |
| Dell Powerstore Dsa2025086 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Feb 20, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-pypygentoo-linux-upgrade-dev-lang-python | Jun 13, 2025 | Aug 19, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-python3huawei-euleros-2_0_sp10-upgrade-python3-fgohuawei-euleros-2_0_sp10-upgrade-python3-unversioned-command | Nov 11, 2024 | Aug 19, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-python3huawei-euleros-2_0_sp11-upgrade-python3-unversioned-command | Dec 12, 2024 | Aug 19, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-python3huawei-euleros-2_0_sp12-upgrade-python3-fgohuawei-euleros-2_0_sp12-upgrade-python3-unversioned-command | Dec 12, 2024 | Aug 19, 2024 | |
| Ibm Aix | ibm-aix-python_advisory13 | Nov 6, 2024 | Aug 19, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-python3-11oracle-linux-upgrade-python3-11-debugoracle-linux-upgrade-python3-11-develoracle-linux-upgrade-python3-11-idleoracle-linux-upgrade-python3-11-libsoracle-linux-upgrade-python3-11-testoracle-linux-upgrade-python3-11-tkinteroracle-linux-upgrade-python3-12oracle-linux-upgrade-python3-12-debugoracle-linux-upgrade-python3-12-develoracle-linux-upgrade-python3-12-idleoracle-linux-upgrade-python3-12-libsoracle-linux-upgrade-python3-12-testoracle-linux-upgrade-python3-12-tkinter | Apr 9, 2025 | Aug 19, 2024 |
| Redhat_linux | redhat-upgrade-python-unversioned-commandredhat-upgrade-python3redhat-upgrade-python3-11redhat-upgrade-python3-11-debugredhat-upgrade-python3-11-debuginforedhat-upgrade-python3-11-debugsourceredhat-upgrade-python3-11-develredhat-upgrade-python3-11-idleredhat-upgrade-python3-11-libsredhat-upgrade-python3-11-testredhat-upgrade-python3-11-tkinterredhat-upgrade-python3-12redhat-upgrade-python3-12-debugredhat-upgrade-python3-12-debuginforedhat-upgrade-python3-12-debugsourceredhat-upgrade-python3-12-develredhat-upgrade-python3-12-idleredhat-upgrade-python3-12-libsredhat-upgrade-python3-12-testredhat-upgrade-python3-12-tkinterredhat-upgrade-python3-9-debuginforedhat-upgrade-python3-9-debugsourceredhat-upgrade-python3-debugredhat-upgrade-python3-develredhat-upgrade-python3-idleredhat-upgrade-python3-libsredhat-upgrade-python3-testredhat-upgrade-python3-tkinter | Apr 8, 2025 | Aug 19, 2024 | |
| Rocky_linux | rocky-upgrade-python3.11rocky-upgrade-python3.11-debugrocky-upgrade-python3.11-debuginforocky-upgrade-python3.11-debugsourcerocky-upgrade-python3.11-develrocky-upgrade-python3.11-idlerocky-upgrade-python3.11-libsrocky-upgrade-python3.11-testrocky-upgrade-python3.11-tkinterrocky-upgrade-python3.12rocky-upgrade-python3.12-debugrocky-upgrade-python3.12-debuginforocky-upgrade-python3.12-debugsourcerocky-upgrade-python3.12-develrocky-upgrade-python3.12-idlerocky-upgrade-python3.12-libsrocky-upgrade-python3.12-testrocky-upgrade-python3.12-tkinter | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-libpython3_10-1_0suse-upgrade-libpython3_10-1_0-32bitsuse-upgrade-libpython3_11-1_0suse-upgrade-libpython3_11-1_0-32bitsuse-upgrade-libpython3_12-1_0suse-upgrade-libpython3_12-1_0-32bitsuse-upgrade-libpython3_13-1_0suse-upgrade-libpython3_13-1_0-x86-64-v3suse-upgrade-libpython3_4m1_0suse-upgrade-libpython3_4m1_0-32bitsuse-upgrade-libpython3_6m1_0suse-upgrade-libpython3_6m1_0-32bitsuse-upgrade-libpython3_9-1_0suse-upgrade-libpython3_9-1_0-32bitsuse-upgrade-python3suse-upgrade-python3-basesuse-upgrade-python3-cursessuse-upgrade-python3-dbmsuse-upgrade-python3-develsuse-upgrade-python3-docsuse-upgrade-python3-doc-devhelpsuse-upgrade-python3-idlesuse-upgrade-python3-testsuitesuse-upgrade-python3-tksuse-upgrade-python3-toolssuse-upgrade-python310suse-upgrade-python310-32bitsuse-upgrade-python310-basesuse-upgrade-python310-base-32bitsuse-upgrade-python310-cursessuse-upgrade-python310-dbmsuse-upgrade-python310-develsuse-upgrade-python310-docsuse-upgrade-python310-doc-devhelpsuse-upgrade-python310-idlesuse-upgrade-python310-testsuitesuse-upgrade-python310-tksuse-upgrade-python310-toolssuse-upgrade-python311suse-upgrade-python311-32bitsuse-upgrade-python311-basesuse-upgrade-python311-base-32bitsuse-upgrade-python311-cursessuse-upgrade-python311-dbmsuse-upgrade-python311-develsuse-upgrade-python311-docsuse-upgrade-python311-doc-devhelpsuse-upgrade-python311-idlesuse-upgrade-python311-testsuitesuse-upgrade-python311-tksuse-upgrade-python311-toolssuse-upgrade-python312suse-upgrade-python312-32bitsuse-upgrade-python312-basesuse-upgrade-python312-base-32bitsuse-upgrade-python312-cursessuse-upgrade-python312-dbmsuse-upgrade-python312-develsuse-upgrade-python312-docsuse-upgrade-python312-doc-devhelpsuse-upgrade-python312-idlesuse-upgrade-python312-testsuitesuse-upgrade-python312-tksuse-upgrade-python312-toolssuse-upgrade-python313suse-upgrade-python313-basesuse-upgrade-python313-base-x86-64-v3suse-upgrade-python313-cursessuse-upgrade-python313-dbmsuse-upgrade-python313-develsuse-upgrade-python313-docsuse-upgrade-python313-doc-devhelpsuse-upgrade-python313-idlesuse-upgrade-python313-tksuse-upgrade-python313-toolssuse-upgrade-python313-x86-64-v3suse-upgrade-python36suse-upgrade-python36-basesuse-upgrade-python36-develsuse-upgrade-python39suse-upgrade-python39-32bitsuse-upgrade-python39-basesuse-upgrade-python39-base-32bitsuse-upgrade-python39-cursessuse-upgrade-python39-dbmsuse-upgrade-python39-develsuse-upgrade-python39-docsuse-upgrade-python39-doc-devhelpsuse-upgrade-python39-idlesuse-upgrade-python39-testsuitesuse-upgrade-python39-tksuse-upgrade-python39-tools | Dec 31, 2024 | Aug 19, 2024 |
| Ubuntu | ubuntu-pro-upgrade-python2-7ubuntu-pro-upgrade-python2-7-minimalubuntu-pro-upgrade-python3-5ubuntu-pro-upgrade-python3-5-minimalubuntu-upgrade-python3-10ubuntu-upgrade-python3-10-minimalubuntu-upgrade-python3-12ubuntu-upgrade-python3-12-minimalubuntu-upgrade-python3-8ubuntu-upgrade-python3-8-minimal | Sep 17, 2024 | Aug 19, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 29, 2025 | Aug 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub