WID-SEC-W-2022-0011

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Python: Mehrere Schwachstellen

view advisory published 2022-05-10

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-4189USmedium5.3—
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV re…
CVE-2021-3737UShigh7.5—
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client scri…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan