Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-45061
HistoryNov 09, 2022 - 7:15 a.m.

Code injection

2022-11-0907:15:00
PRIOn knowledge base
www.prio-n.com
18
python
version 3.11.1
idna decoder
cpu denial of service

7.7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.5%

JSON

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.

References

Related

ubuntucve 1
nessus 67
fedora 29
osv 8
veracode 1
amazon 4
oraclelinux 2
almalinux 3
ibm 6
openvas 55
redhat 3
alpinelinux 1
cbl_mariner 3
cve 1
redhatcve 1
debiancve 1
nvd 1
f5 1
aix 1
rocky 1
cvelist 1
cloudlinux 1
ubuntu 2
cloudfoundry 1
redos 1
photon 3
ubuntucve
ubuntucve
CVE-2022-45061
2022-11-09 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : Python vulnerability (USN-5767-2)
2022-12-08 00:00:00
Fedora 36 : python3.12 (2022-de755fd092)
2022-12-21 00:00:00
Fedora 35 : python3.7 (2022-fdb2739feb)
2022-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: python3.7-3.7.16-1.fc35
2022-12-09 00:49:31
[SECURITY] Fedora 36 Update: python3.7-3.7.16-1.fc36
2022-12-16 01:43:25
[SECURITY] Fedora 37 Update: python3.10-3.10.9-1.fc37
2022-12-17 01:48:41
osv
osv
CVE-2022-45061
2022-11-09 07:15:09
BIT-python-2022-45061
2024-03-06 11:04:55
python2.7, python3.5 vulnerability
2022-12-08 17:10:11
veracode
veracode
Denial Of Service (DoS)
2022-12-12 08:25:10
amazon
amazon
Important: python3
2023-01-18 00:17:00
Important: python38
2023-03-30 22:50:00
Important: python
2023-03-02 22:35:00
oraclelinux
oraclelinux
python3.9 security update
2023-02-28 00:00:00
python27:2.7 security update
2023-05-24 00:00:00
almalinux
almalinux
Moderate: python3.9 security update
2023-02-28 00:00:00
Moderate: python27:2.7 security update
2023-05-16 00:00:00
Moderate: python3 security update
2023-02-21 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Python below 3.9.16 affecting IBM Spectrum Protect Plus and its application agents for IBM Db2 and MongoDb2 using python.
2023-05-31 08:28:01
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python ( CVE-2022-45061)
2023-05-03 14:10:35
Security Bulletin: Data Privacy on Cloud Pak for Data is Vulnerable to Python DoS error (CVE-2022-45061)
2023-06-06 16:31:59
openvas
openvas
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2023-1513)
2023-03-09 00:00:00
Fedora: Security Advisory for python3.10 (FEDORA-2022-e699dd5247)
2022-12-24 00:00:00
Fedora: Security Advisory for python3.10 (FEDORA-2022-b2f06fbb62)
2022-12-17 00:00:00
redhat
redhat
(RHSA-2023:2860) Moderate: python27:2.7 security update
2023-05-16 05:56:37
(RHSA-2023:0953) Moderate: python3.9 security update
2023-02-28 07:53:00
(RHSA-2023:2764) Moderate: python39:3.9 and python39-devel:3.9 security update
2023-05-16 05:54:01
alpinelinux
alpinelinux
CVE-2022-45061
2022-11-09 07:15:09
cbl_mariner
cbl_mariner
CVE-2022-45061 affecting package python3 for versions less than 3.9.14-5
2022-12-19 20:12:40
CVE-2022-45061 affecting package python3 3.7.13-6
2023-06-13 20:02:41
CVE-2022-45061 affecting package python2 2.7.18-13
2023-06-13 20:02:41
cve
cve
CVE-2022-45061
2022-11-09 07:15:09
redhatcve
redhatcve
CVE-2022-45061
2022-11-18 21:55:58
debiancve
debiancve
CVE-2022-45061
2022-11-09 07:15:09
nvd
nvd
CVE-2022-45061
2022-11-09 07:15:09
f5
f5
K000134706 : Python IDNA vulnerability CVE-2022-45061
2023-05-20 00:00:00
aix
aix
AIX is affected by a denial of service due to Python
2023-03-14 13:01:15
rocky
rocky
python3.9 security update
2023-04-06 15:53:31
cvelist
cvelist
CVE-2022-45061
2022-11-09 00:00:00
cloudlinux
cloudlinux
python: Fix of CVE-2022-45061
2022-11-23 20:50:30
ubuntu
ubuntu
Python vulnerability
2022-12-08 00:00:00
Python vulnerabilities
2022-12-08 00:00:00
cloudfoundry
cloudfoundry
USN-5767-1: Python vulnerabilities | Cloud Foundry
2023-01-26 00:00:00
redos
redos
ROS-20240409-01
2024-04-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0489
2022-11-17 00:00:00
Important Photon OS Security Update - PHSA-2022-0283
2022-11-16 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0283
2022-11-16 00:00:00

7.7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.5%

JSON
Related for PRION:CVE-2022-45061
ubuntucve1nessus67fedora29osv8veracode1amazon4oraclelinux2almalinux3ibm6openvas55redhat3alpinelinux1cbl_mariner3cve1redhatcve1debiancve1nvd1f51aix1rocky1cvelist1cloudlinux1ubuntu2cloudfoundry1redos1photon3