ALPINE-CVE-2020-8492
ALPINE-CVE-2020-8492
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
CVSS 6.5 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
python3 Alpine:v3.10
- Affected ranges
- ECOSYSTEM: < 3.7.7-r0
Update to 3.7.7-r0
python3 Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0
python3 Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 3.8.2-r0
Update to 3.8.2-r0