• CVE-2024-7592

发布时间: 2024年9月5日

修改时间: 2024年9月6日

概要

There is a LOW severity vulnerability affecting CPython, specifically the http.cookies standard library module.When parsing cookies that contained backslashes for quoted characters inthe cookie value, the parser would use an algorithm with quadraticcomplexity, resulting in excess CPU resources being used while parsing thevalue.

CVSS v3 指标

NVD openEuler
CVSS评分 7.5 7.5
Attack Vector Network Network
Attack Complexity Low Low
Privileges Required None None
User Interaction None None
Scope Unchanged Unchanged
Confidentiality None None
Integrity None None
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-3626 python3 security update 2024年9月6日

影响产品

产品 状态
KY3.4-5A python3 Unaffected
KY3.5.2 python3 Fixed
V6 python3 Fixed