CVE-2021-3737
High
Description
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
SeverityHigh
CVSS7.5
Exploit probability96. percentile13.2%
Product
Python
PublishedMar 4, 2022
First seenMar 4, 2022
Weakness typeCWE-835CWE-835
How to fix
Update
- python python3.6.14, 3.7.11, 3.8.11, 3.9.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python python | 3.6.0 ≤ v < 3.6.14, 3.7.0 ≤ v < 3.7.11, 3.8.0 ≤ v < 3.8.11, 3.9.0 ≤ v < 3.9.6 | 3.6.14, 3.7.11, 3.8.11, 3.9.6 |
| redhat codeready_linux_builder | 8.0 | — |
| redhat codeready_linux_builder_for_ibm_z_systems | 8.0 | — |
| redhat codeready_linux_builder_for_power_little_endian | 8.0 | — |
| redhat enterprise_linux | 6.0, 7.0, 8.0 | — |
| redhat enterprise_linux_for_ibm_z_systems | 8.0 | — |
| redhat enterprise_linux_for_power_little_endian | 8.0 | — |
| fedoraproject fedora | 33, 34 | — |
| canonical ubuntu_linux | 14.04, 16.04, 18.04, 20.04, 21.04 | — |
| netapp hci | No range specified | — |
| netapp management_services_for_element_software | No range specified | — |
| netapp netapp_xcp_smb | No range specified | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| netapp xcp_nfs | No range specified | — |
| oracle communications_cloud_native_core_binding_support_function | 22.1.3 | — |
| oracle communications_cloud_native_core_network_exposure_function | 22.1.1 | — |
| oracle communications_cloud_native_core_policy | 22.2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.