GHSA-rwqr-c348-m5wr

ghsaUSosv

Withdrawn: Denial of Service in aiohttp

view advisory published 2022-06-24Licence: CC-BY-4.0

## Withdrawn This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report. ## Original Description aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL which can lead to a Denial of Service (DoS).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-33124US	medium5.5	0.72% (54th)	—	2022-06-23
AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no…

references

External citations — patches, advisories, analysis.

https://github.com/aio-libs/aiohttpPACKAGE
https://github.com/aio-libs/aiohttp/issues/6772WEB
https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2022-43059.yamlWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-33124ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan