Skip to content
OpenAdvisories
Medium USN-4956-1 1 CVE

python-eventlet vulnerability

Published May 17, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Eventlet incorrectly handled certain requests.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-eventlet 0.25.1-2ubuntu1.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-21419

    Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

    Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version…

    eventlet eventlet eventlet python-eventlet Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2021-21419