CVE-2021-20270
Severity
7.5HIGH
EPSS
0.2%
top 57.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 23
Latest updateAug 14
Description
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages7 packages
Also affects: Debian Linux 10.0, 9.0, Fedora 33, Enterprise Linux 7.0, 8.0, Openshift Container Platform 3.11, 4.0
Patches
🔴Vulnerability Details
5📋Vendor Advisories
5Microsoft▶
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file as demonstrated by input that only c↗2021-03-09
Debian▶
CVE-2021-20270: mediawiki - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denia...↗2021