All errata/sisyphus_mipsel/ALT-PU-2023-2299-1
ALT-PU-2023-2299-1

Package update python3-module-aiohttp in branch sisyphus_mipsel

Version3.8.3-alt1
Task#0
Published2023-01-22
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2022-33124
MEDIUM5.5

AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application

Published: 2022-06-23Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References