Skip to content
OpenAdvisories

Package · Ubuntu

python-httplib2

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

    httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or co…

  • High 7.5

    Regular Expression Denial of Service in httplib2

    httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header)…