Lucene search
Veracode Vulnerability DatabaseVERACODE:29566HistoryMar 04, 2021 - 4:44 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-03-0404:44:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
regular expression denial of service
vulnerability
parsing
resource consumption
whitespace
newline
string
software
EPSS
0.003
Percentile
69.8%
markdown2 is vulnerable to regular expression denial of service (ReDoS). The vulnerability exists as the regular expressions found in self.regex_defns, _fenced_code_block_re, and _emacs_oneliner_vars_pat causes a huge consumption of resources when parsing strings with many whitespace or newline characters.
References
github.com/trentm/python-markdown2/commit/7b651260739647de5198323e0445b1618750c374
github.com/trentm/python-markdown2/pull/387
lists.fedoraproject.org/archives/list/[email protected]/message/BRP5RN35JZTSJ3JT4722F447ZDK7LZS5/
lists.fedoraproject.org/archives/list/[email protected]/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/
lists.fedoraproject.org/archives/list/[email protected]/message/JTIX5UXRDJZJ57DO4V33ZNJTNKWGBQLY/
Related
openvas
openvas
Fedora: Security Advisory for python-markdown2 (FEDORA-2021-0337384e41)
2021-05-13 00:00:00
Fedora: Security Advisory for python-markdown2 (FEDORA-2021-e235a0da4a)
2021-05-13 00:00:00
openSUSE: Security Advisory for python-markdown2 (openSUSE-SU-2021:0429-1)
2021-04-16 00:00:00
ubuntucve
ubuntucve
CVE-2021-26813
2021-03-03 00:00:00
debiancve
debiancve
CVE-2021-26813
2021-03-03 16:15:13
suse
suse
Security update for python-markdown2 (moderate)
2021-03-20 00:00:00
Security update for python-markdown2 (moderate)
2021-03-16 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: python-markdown2-2.4.0-1.fc34
2021-05-10 01:07:00
[SECURITY] Fedora 33 Update: python-markdown2-2.4.0-1.fc33
2021-05-10 01:08:51
[SECURITY] Fedora 32 Update: python-markdown2-2.4.0-1.fc32
2021-05-10 00:52:56
cvelist
cvelist
CVE-2021-26813
2021-03-03 15:17:41
osv
osv
PYSEC-2021-20
2021-03-03 16:15:00
markdown2 Regular Expression Denial of Service
2021-06-02 21:44:28
CVE-2021-26813
2021-03-03 16:15:13
nessus
nessus
nvd
nvd
CVE-2021-26813
2021-03-03 16:15:13
github
github
markdown2 Regular Expression Denial of Service
2021-06-02 21:44:28
prion
prion
Design/Logic Flaw
2021-03-03 16:15:00
freebsd
freebsd
py-markdown2 -- regular expression denial of service vulnerability
2021-03-03 00:00:00
cve
cve
CVE-2021-26813
2021-03-03 16:15:13
kitploit
kitploit