Summary
It was discovered that the Python urllib http client could enter into an infinite
loop when incorrectly handling certain server responses (100 Continue response).
Specially crafted traffic from a malicious HTTP server could cause a denial of
service (Dos) condition for a client.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | python3.8 | 3.8.10-0ubuntu1~20.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | python3.9 | 3.9.5-3ubuntu0~20.04.1 |
Vulnerabilities 1
-
High 7.5CVE-2021-3737 EPSS 13%
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…
References
-
report
https://ubuntu.com/security/CVE-2021-3737