PYSEC-2022-42969

vendorUSosv

view advisory published 2022-11-04Licence: CC-BY-4.0

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-42969US	high7.5	2.09% (81st)	—	2022-10-16
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data…

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-w596-4wvx-j9j6ADVISORY
https://github.com/pytest-dev/py/issues/287REPORT
https://github.com/pytest-dev/py/issues/288REPORT
https://github.com/pytest-dev/pytest/issues/10392REPORT
https://nvd.nist.gov/vuln/detail/CVE-2022-42969WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan