Lucene search
GoogleOSV:PYSEC-2022-42991HistoryDec 23, 2022 - 12:15 a.m.
PYSEC-2022-42991
2022-12-2300:15:00
Google
osv.dev
18
python
charmers
future
denial of service
crafted set-cookie
web server
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
74.4%
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
Related
cve
cve
CVE-2022-40899
2022-12-23 00:15:14
nessus
nessus
RHEL 7 : future (Unpatched Vulnerability)
2024-06-03 00:00:00
SUSE SLES12 Security Update : python-future (SUSE-SU-2023:0078-1)
2023-01-13 00:00:00
SUSE SLES12 Security Update : python3 (SUSE-SU-2023:0076-1)
2023-01-13 00:00:00
osv
osv
CVE-2022-40899
2022-12-23 00:15:14
Python Charmers Future denial of service vulnerability
2022-12-23 00:30:23
python-future vulnerability
2023-01-31 10:33:25
debiancve
debiancve
CVE-2022-40899
2022-12-23 00:15:14
cvelist
cvelist
CVE-2022-40899
2022-12-22 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0030)
2023-03-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0076-1)
2023-01-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0078-1)
2023-01-12 00:00:00
ubuntu
ubuntu
python-future vulnerability
2023-01-31 00:00:00
redos
redos
ROS-20230428-01
2023-04-28 00:00:00
prion
prion
Code injection
2022-12-23 00:15:00
redhatcve
redhatcve
CVE-2022-40899
2023-01-31 10:35:44
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future (CVE-2022-40899)
2023-03-31 17:20:29
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
2023-06-20 04:41:00
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-07-03 18:48:48
ubuntucve
ubuntucve
CVE-2022-40899
2022-12-23 00:00:00
mageia
mageia
Updated python-future packages fix security vulnerability
2023-02-07 03:06:39
nvd
nvd
CVE-2022-40899
2022-12-23 00:15:14
github
github
Python Charmers Future denial of service vulnerability
2022-12-23 00:30:23
redhat
redhat
rocky
rocky
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.004 Low
EPSS
Percentile
74.4%
Related for OSV:PYSEC-2022-42991