Skip to content
OpenAdvisories
High · 7.5 CVE-2019-1010083 EUVD-2019-0055GHSA-5wv5-4vpf-pj6mPYSEC-2019-179

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

Published Jul 17, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Vendor: The Pallets Project Product: Flask Package: flask Package: flask Ecosystem: Debian Ecosystem: PyPI

Description

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

Affected products

VendorProductAffectedFixed
The Pallets Project Flask ≤ 1.0 [fixed: 1] —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 flask 1.0.2-1 —
Debian 13 flask 1.0.2-1 —
Debian 12 flask 1.0.2-1 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 python-Flask 0.12.1-7.7.1 SUSE-SU-2023:1928-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE OpenStack Cloud Crowbar 8 ansible 2.4.6.0-3.9.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 caasp-openstack-heat-templates 1.0+git.1560518045.ad7dc6d-4.18.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 crowbar-core 5.0+git.1593156248.55bbdb26d-3.41.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 crowbar-openstack 5.0+git.1593085772.64c4ab43c-4.40.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-deployment +3 8.20200527-1.26.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 grafana 4.6.5-4.9.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 kibana 4.6.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-dashboard 12.0.5~dev3-3.26.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-heat-templates 0.0.0+git.1582270132.8a20477-3.15.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-keystone +1 12.0.4~dev11-5.33.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-monasca-agent 2.2.6~dev4-3.18.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-monasca-installer 20190923_16.32-3.12.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-neutron +1 11.0.9~dev65-3.33.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 openstack-octavia-amphora-image 0.1.4-3.12.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-Django 1.11.23-3.15.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-Flask 0.12.1-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-Pillow 4.2.1-3.5.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-amqp 2.4.2-3.12.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-apicapi 1.6.0-3.6.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-keystoneauth1 3.1.2~dev2-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-oslo.messaging 5.30.8-3.11.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-psutil 5.2.2-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-pyroute2 0.4.21-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-pysaml2 4.0.2-5.6.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-tooz 1.58.1-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 python-waitress 1.4.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 rubygem-activeresource 4.0.0-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 rubygem-crowbar-client 3.9.2-3.12.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 rubygem-json-1_7 1.7.7-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 rubygem-puma 2.16.0-3.9.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8 storm 1.1.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ansible 2.4.6.0-3.9.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ansible1 1.9.6-7.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-ansible 8.0+git.1589740980.6c3bcdc-3.73.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-cluster 8.0+git.1585685203.3e71e49-3.36.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-freezer 8.0+git.1586539529.b7d295f-3.21.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-input-model 8.0+git.1589740934.0e0ad61-3.39.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-logging 8.0+git.1591194866.b7375d0-3.24.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-mq 8.0+git.1589715269.62ad6df-3.22.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-neutron 8.0+git.1590756744.ba84abc-3.42.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-octavia 8.0+git.1590100427.cf4cc8f-3.29.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 ardana-osconfig 8.0+git.1587034587.eac37b8-3.45.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 caasp-openstack-heat-templates 1.0+git.1560518045.ad7dc6d-4.18.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 documentation-suse-openstack-cloud-user +8 8.20200527-1.26.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 grafana 4.6.5-4.9.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 kibana 4.6.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-dashboard 12.0.5~dev3-3.26.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-heat-templates 0.0.0+git.1582270132.8a20477-3.15.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-keystone +1 12.0.4~dev11-5.33.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-monasca-agent 2.2.6~dev4-3.18.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-monasca-installer 20190923_16.32-3.12.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-neutron +1 11.0.9~dev65-3.33.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 openstack-octavia-amphora-image 0.1.4-3.12.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-Django 1.11.23-3.15.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-Flask 0.12.1-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-GitPython 2.1.8-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-Pillow 4.2.1-3.5.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-amqp 2.4.2-3.12.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-apicapi 1.6.0-3.6.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-keystoneauth1 3.1.2~dev2-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-oslo.messaging 5.30.8-3.11.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-psutil 5.2.2-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-pyroute2 0.4.21-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-pysaml2 4.0.2-5.6.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-tooz 1.58.1-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 python-waitress 1.4.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 storm 1.1.3-3.3.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-aodh 5.1.1~dev7-12.26.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-barbican 5.0.2~dev3-12.27.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-ceilometer 9.0.8~dev7-12.24.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-cinder 11.2.3~dev23-14.27.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-designate 5.0.3~dev7-12.25.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.22.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-glance 15.0.3~dev3-12.25.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-heat 9.0.8~dev22-12.27.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-horizon 12.0.5~dev3-14.30.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-ironic 9.1.8~dev8-12.27.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-keystone 12.0.4~dev11-11.28.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.26.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-manila 5.1.1~dev5-12.31.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-monasca 2.2.2~dev1-11.22.3 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.22.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-murano 4.0.2~dev2-12.22.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-neutron 11.0.9~dev65-13.30.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-nova 16.1.9~dev61-11.28.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-octavia 1.0.6~dev3-12.27.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-sahara 7.0.5~dev4-11.26.2 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-swift 2.15.2_2.15.2_2.15.2~dev32-11.18.1 SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8 venv-openstack-trove 8.0.2~dev2-11.26.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ansible 2.4.6.0-3.9.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ansible1 1.9.6-7.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-ansible 8.0+git.1589740980.6c3bcdc-3.73.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-cluster 8.0+git.1585685203.3e71e49-3.36.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-freezer 8.0+git.1586539529.b7d295f-3.21.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-input-model 8.0+git.1589740934.0e0ad61-3.39.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-logging 8.0+git.1591194866.b7375d0-3.24.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-mq 8.0+git.1589715269.62ad6df-3.22.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-neutron 8.0+git.1590756744.ba84abc-3.42.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-octavia 8.0+git.1590100427.cf4cc8f-3.29.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 ardana-osconfig 8.0+git.1587034587.eac37b8-3.45.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 caasp-openstack-heat-templates 1.0+git.1560518045.ad7dc6d-4.18.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 documentation-hpe-helion-openstack-user +5 8.20200527-1.26.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 grafana 4.6.5-4.9.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 kibana 4.6.3-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-dashboard 12.0.5~dev3-3.26.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-dashboard-theme-HPE 8+git.1523473653.6599ec8-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-heat-templates 0.0.0+git.1582270132.8a20477-3.15.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-keystone +1 12.0.4~dev11-5.33.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-monasca-agent 2.2.6~dev4-3.18.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-monasca-installer 20190923_16.32-3.12.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-neutron +1 11.0.9~dev65-3.33.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 openstack-octavia-amphora-image 0.1.4-3.12.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-Django 1.11.23-3.15.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-Flask 0.12.1-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-GitPython 2.1.8-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-Pillow 4.2.1-3.5.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-amqp 2.4.2-3.12.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-apicapi 1.6.0-3.6.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-keystoneauth1 3.1.2~dev2-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-oslo.messaging 5.30.8-3.11.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-psutil 5.2.2-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-pyroute2 0.4.21-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-pysaml2 4.0.2-5.6.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-tooz 1.58.1-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 python-waitress 1.4.3-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 storm 1.1.3-3.3.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-aodh 5.1.1~dev7-12.26.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-barbican 5.0.2~dev3-12.27.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-ceilometer 9.0.8~dev7-12.24.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-cinder 11.2.3~dev23-14.27.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-designate 5.0.3~dev7-12.25.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.22.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-glance 15.0.3~dev3-12.25.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-heat 9.0.8~dev22-12.27.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-horizon-hpe 12.0.5~dev3-14.30.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-ironic 9.1.8~dev8-12.27.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-keystone 12.0.4~dev11-11.28.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.26.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-manila 5.1.1~dev5-12.31.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca 2.2.2~dev1-11.22.3 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.22.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-murano 4.0.2~dev2-12.22.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-neutron 11.0.9~dev65-13.30.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-nova 16.1.9~dev61-11.28.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-octavia 1.0.6~dev3-12.27.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-sahara 7.0.5~dev4-11.26.2 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-swift 2.15.2_2.15.2_2.15.2~dev32-11.18.1 SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8 venv-openstack-trove 8.0.2~dev2-11.26.1 SUSE-SU-2020:1901-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI flask < 1.0 1.0 GHSA-5wv5-4vpf-pj6m

Advisories 2

References