Lucene search
PRIOn knowledge basePRION:CVE-2022-40897HistoryDec 23, 2022 - 12:15 a.m.
Denial of service
2022-12-2300:15:00
PRIOn knowledge base
www.prio-n.com
10
pypa setuptools
denial of service
html
crafted package
packageindex
regular expression denial of service
redos
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
| CPE | Name | Operator | Version |
|---|---|---|---|
| setuptools | lt | 65.5.1 |
References
github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py
github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
github.com/pypa/setuptools/compare/v65.5.0...v65.5.1
lists.fedoraproject.org/archives/list/[email protected]/message/ADES3NLOE5QJKBLGNZNI2RGVOSQXA37R/
lists.fedoraproject.org/archives/list/[email protected]/message/YNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H/
pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
pyup.io/vulnerabilities/CVE-2022-40897/52495/
security.netapp.com/advisory/ntap-20230214-0001/
Related
nessus
nessus
EulerOS 2.0 SP10 : python-setuptools (EulerOS-SA-2023-1563)
2023-03-19 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-setuptools (SUSE-SU-2023:0159-1)
2023-01-27 00:00:00
AlmaLinux 9 : python-setuptools (ALSA-2023:0952)
2023-02-28 00:00:00
redhatcve
redhatcve
CVE-2022-40897
2023-01-05 18:35:06
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0093-1)
2023-01-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0159-1)
2023-01-27 00:00:00
cvelist
cvelist
CVE-2022-40897
2022-12-22 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2023:0952) Moderate: python-setuptools security update
2023-02-28 07:52:59
(RHSA-2023:0835) Moderate: python-setuptools security update
2023-02-21 08:46:22
(RHSA-2023:7395) Moderate: python-setuptools security update
2023-11-21 09:47:07
freebsd
freebsd
py39-setuptools58 -- denial of service vulnerability
2022-12-23 00:00:00
py27-setuptools44 -- denial of service vulnerability
2022-12-23 00:00:00
py39-setuptools -- denial of service vulnerability
2022-12-23 00:00:00
osv
osv
Moderate: python-setuptools security update
2023-04-06 15:53:31
Moderate: python-setuptools security update
2023-02-28 00:00:00
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
github
github
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
2022-12-23 00:30:23
fedora
fedora
[SECURITY] Fedora 36 Update: python-setuptools-59.6.0-4.fc36
2023-04-30 01:24:06
[SECURITY] Fedora 37 Update: python-setuptools-62.6.0-3.fc37
2023-05-01 01:29:09
amazon
amazon
Medium: python2-setuptools
2023-03-02 22:35:00
Medium: python-setuptools
2023-08-03 18:10:00
rocky
rocky
python-setuptools security update
2023-02-22 01:08:44
python-setuptools security update
2023-04-06 15:53:31
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
nvd
nvd
CVE-2022-40897
2022-12-23 00:15:13
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-12-23 08:31:40
almalinux
almalinux
Moderate: python-setuptools security update
2023-02-21 00:00:00
Moderate: python-setuptools security update
2023-02-28 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 00:00:00
oraclelinux
oraclelinux
python-setuptools security update
2023-02-22 00:00:00
python3-setuptools security update
2023-05-23 00:00:00
python-setuptools security update
2023-02-28 00:00:00
ubuntu
ubuntu
Setuptools vulnerability
2023-01-23 00:00:00
gentoo
gentoo
Setuptools: Denial of Service
2024-05-05 00:00:00
cve
cve
CVE-2022-40897
2022-12-23 00:15:13
mageia
mageia
Updated python-setuptools packages fix security vulnerability
2023-07-07 08:54:45
cbl_mariner
cbl_mariner
CVE-2022-40897 affecting package python-setuptools 40.2.0-6
2023-01-12 20:54:53
ubuntucve
ubuntucve
CVE-2022-40897
2022-12-23 00:00:00
redos
redos
ROS-20230428-05
2023-04-28 00:00:00
debiancve
debiancve
CVE-2022-40897
2022-12-23 00:15:13
cloudfoundry
cloudfoundry
USN-5817-1: Setuptools vulnerability | Cloud Foundry
2023-02-24 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0427
2023-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00