Lucene search
GoogleOSV:PYSEC-2021-12HistoryMay 07, 2021 - 3:15 p.m.
PYSEC-2021-12
2021-05-0715:15:00
Google
osv.dev
22
eventlet
python
networking
websocket
memory exhaustion
patch
version 0.31.0
os limits
machine exhaustion
EPSS
0.001
Percentile
47.2%
Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.
Related
fedora
fedora
[SECURITY] Fedora 34 Update: python-eventlet-0.31.0-1.fc34
2021-05-25 01:09:52
[SECURITY] Fedora 33 Update: python-eventlet-0.31.0-1.fc33
2021-05-25 01:10:23
prion
prion
Code injection
2021-05-07 15:15:00
Design/Logic Flaw
2023-11-01 14:15:00
veracode
veracode
Denial Of Service (DoS)
2021-05-10 02:49:48
cvelist
cvelist
github
github
osv
osv
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
2021-05-07 15:50:36
python-eventlet vulnerability
2021-05-17 13:32:42
CVE-2021-21419
2021-05-07 15:15:07
mageia
mageia
Updated python-eventlet packages fix security vulnerability
2021-06-18 22:24:28
openvas
openvas
Fedora: Security Advisory for python-eventlet (FEDORA-2021-9fde3d7ab1)
2021-05-27 00:00:00
Mageia: Security Advisory (MGASA-2021-0266)
2022-01-28 00:00:00
Fedora: Security Advisory for python-eventlet (FEDORA-2021-d5915c247b)
2021-05-27 00:00:00
redhat
redhat
redhatcve
redhatcve
CVE-2021-21419
2021-05-11 20:54:43
CVE-2023-5625
2023-10-19 21:27:27
debiancve
debiancve
CVE-2021-21419
2021-05-07 15:15:07
CVE-2023-5625
2023-11-01 14:15:38
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.1 (python-eventlet) (RHSA-2021:5071)
2021-12-11 00:00:00
Ubuntu 20.04 LTS : Eventlet vulnerability (USN-4956-1)
2021-05-17 00:00:00
RHEL 9 : OpenShift Container Platform 4.12.41 (RHSA-2023:6128)
2024-04-28 00:00:00
cve
cve
CVE-2021-21419
2021-05-07 15:15:07
CVE-2023-5625
2023-11-01 14:15:38
ubuntu
ubuntu
Eventlet vulnerability
2021-05-17 00:00:00
ubuntucve
ubuntucve
CVE-2021-21419
2021-05-07 00:00:00
CVE-2023-5625
2023-11-01 00:00:00
nvd
nvd
CVE-2021-21419
2021-05-07 15:15:07
CVE-2023-5625
2023-11-01 14:15:38
vulnrichment
vulnrichment