CVE-2021-3737
Severity
7.5HIGH
EPSS
0.1%
top 69.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 4
Latest updateJul 11
Description
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages10 packages
▶CVEListV5pythonFixed in python v3.6.14, python v3.7.11, python v3.8.11, python v3.9.6, python v3.10.0b2
Also affects: Enterprise Linux 6.0, 7.0, 8.0, Fedora 33, 34, Ubuntu Linux 14.04, 16.04, 18.04, 20.04, 21.04
Patches
🔴Vulnerability Details
5📋Vendor Advisories
9Oracle▶
Oracle Oracle Database Server Risk Matrix: Oracle Database - Machine Learning for Python (Python) — CVE-2021-3737↗2023-01-15
Microsoft▶
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker who controls the HTTP server to make the client script enter an infinite l↗2022-03-08