CVE-2021-29063

published 2021-06-21

CVE-2021-29063: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.

Priority P3 35 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	mpmath	< mpmath 1.2.1-2 (bookworm)	mpmath 1.2.1-2 (bookworm)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
mpmath	mpmath	>= 0 < 1.2.1-2	1.2.1-2
mpmath	mpmath	>= 0 < 1.2.1-2	1.2.1-2
mpmath	mpmath	>= 0 < 1.2.1-2	1.2.1-2
mpmath	mpmath	>= 0 < 1.3.0	1.3.0
mpmath	mpmath	>= 0 < 46d44c3c8f3244017fe1eb102d564eb4ab8ef750	46d44c3c8f3244017fe1eb102d564eb4ab8ef750
mpmath	mpmath	1.0.0 – 1.2.1	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770