CVE-2024-7592

216.73.217.22

· Published 19/08/2024 19:15 · Modified 04/09/2024 21:15

Labels: CVE-2024-7592 2024-08-19 CVE-2024-7592 CWE-1333 CWE-400 [email protected]

Essential information

Published: 19/08/2024 19:15
Modified: 04/09/2024 21:15
Author: —
Creator: —
CVSS: 7.5 HIGH (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS metrics

Description

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

NVD status

Status: Modified — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
python / python	`cpe:2.3:a:python:python::::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha0::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha1::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha2::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha3::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha4::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha5::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:alpha6::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:beta1::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:beta2::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:beta3::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:beta4::::::`
python / python	`cpe:2.3:a:python:python:3.13.0:rc1::::::`