When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.12-develUpgrade python3.12-idleUpgrade python3.11Upgrade python3.11-testUpgrade python3.12-testUpgrade python3.11-libsUpgrade python3.11-idleUpgrade python3.12-rpm-macrosUpgrade python3.11-rpm-macrosUpgrade python3.11-tkinterUpgrade python3.12-tkinterUpgrade python3.12Upgrade python3.11-develUpgrade python3.12-debugUpgrade python3.12-libsUpgrade python3.11-debug | Jan 30, 2026 | Jan 27, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.12-develUpgrade python3.12-idleUpgrade python3.12-libsUpgrade python3.13-idleUpgrade python3.11Upgrade python3.11-debuginfoUpgrade python3.11-libsUpgrade python3.12-debugUpgrade python3.13-libsUpgrade python3.11-tkinterUpgrade python3.13-freethreading-debugUpgrade python3.13-debugUpgrade python3.11-testUpgrade python3.12-debugsourceUpgrade python3.12-testUpgrade python3.13-freethreadingUpgrade python3.13-testUpgrade python3.13-debuginfoUpgrade python3.13-tkinterUpgrade python3.11-debugsourceUpgrade python3.13-develUpgrade python3.12-debuginfoUpgrade python3.11-idleUpgrade python3.12-tkinterUpgrade python3.11-debugUpgrade python3.13-debugsourceUpgrade python3.12Upgrade python3.13Upgrade python3.11-devel | Jan 12, 2026 | Dec 1, 2025 |
| Debian | — | Upgrade python3.11Upgrade python3.13Upgrade python3.9 | Jan 22, 2026 | Jan 22, 2026 |
| Freebsd | — | Upgrade python314Upgrade python310Upgrade python313Upgrade python39Upgrade python312Upgrade python311 | Dec 10, 2025 | Dec 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-fgoUpgrade python3Upgrade python3-unversioned-command | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-unversioned-commandUpgrade python3Upgrade python3-fgo | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Mar 10, 2026 | Mar 10, 2026 |
| Oracle Missing Cpu Jan 2026 | — | Apply the January 2026 Critical Patch Update (CPU) for Oracle Database | Jan 21, 2026 | Dec 1, 2025 |
| Oracle_linux | — | Upgrade python3-develUpgrade python3.12-rpm-macrosUpgrade python3.11-develUpgrade python-unversioned-commandUpgrade python3.11-tkinterUpgrade python3.11-idleUpgrade python3-tkinterUpgrade python3.11-debugUpgrade python3.12-tkinterUpgrade python3.12-testUpgrade python3.12Upgrade python3.11-rpm-macrosUpgrade python3Upgrade python3.12-libsUpgrade python3.12-debugUpgrade python3.12-idleUpgrade python3-testUpgrade python3-debugUpgrade python3.11Upgrade python3.11-libsUpgrade python3-idleUpgrade python3-libsUpgrade python3.12-develUpgrade python3.11-test | Jan 29, 2026 | Dec 1, 2025 |
| Redhat_linux | — | Upgrade python3Upgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python3.12-develUpgrade python3-idleUpgrade python3-libsUpgrade python3.12-idleUpgrade python3-develUpgrade python3.11-debuginfoUpgrade python3.12-debugsourceUpgrade python3.11-testUpgrade python3.12-rpm-macrosUpgrade python3.12-testUpgrade python3-testUpgrade python3.11-rpm-macrosUpgrade python3.11-idleUpgrade python3.12-debugUpgrade python3.12Upgrade python3.11-debugsourceUpgrade python3.11Upgrade python3.11-tkinterUpgrade python3.12-debuginfoUpgrade python3.11-debugUpgrade python3.11-develUpgrade python3.12-libsUpgrade python3-debugUpgrade python3-tkinterUpgrade python3.12-tkinter | Jan 28, 2026 | Dec 1, 2025 |
| Rocky_linux | — | Upgrade python3.11-testUpgrade python3.12-testUpgrade python3.11-tkinterUpgrade python3.11-libsUpgrade python3-tkinterUpgrade python3.12-debugsourceUpgrade python3-idleUpgrade python3.11Upgrade python3-libsUpgrade python3-develUpgrade python3.11-debuginfoUpgrade python3.12-develUpgrade python3.12-debuginfoUpgrade python3.12-debugUpgrade python3.11-develUpgrade python3.11-debugsourceUpgrade python3.12-idleUpgrade python3.11-idleUpgrade python3-debugUpgrade python3.12-tkinterUpgrade python3.12Upgrade python3Upgrade python3.12-libsUpgrade python3-testUpgrade python3.11-debug | Jan 29, 2026 | Jan 28, 2026 |
| Ubuntu | — | Upgrade libpython3.13Upgrade python3.13Upgrade libpython3.14Upgrade python3.14Upgrade libpython3.12t64Upgrade python3.10Upgrade python3.12Upgrade libpython3.11 (Ubuntu Pro)Upgrade libpython3.8 (Ubuntu Pro)Upgrade libpython3.10Upgrade python3.9 (Ubuntu Pro)Upgrade libpython3.9 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.11 (Ubuntu Pro) | Jan 13, 2026 | Dec 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub