Skip to content
OpenAdvisories
Medium ALAS2023-2023-173 1 CVE

Moderate: future security update (Amazon Linux 2023)

Published Apr 27, 2023 · Updated May 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-40899: An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2023 python3-future 0:0.18.3-1.amzn2023.0.1

Vulnerabilities 1

  • High 7.5
    CVE-2022-40899

    Python Charmers Future denial of service vulnerability

    An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

    future python-future python-future Debian Ubuntu PyPI

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-40899.html