CVE-2020-8492

6.5

MEDIUMCVSS v3

Published

January 30, 2020

CVSS v2

7.1 HIGH

Affected

14 projects

Assigned by

MITRE

Severity scale

010

Description

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

python/cpython

GitHubThe Python programming language

NVD

Python

ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs. ## Notes - This package depends on the the latest major version of python package. - This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters. - **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**

>= 3.8.0, <= 3.8.1, >= 3.7.0, <= 3.7.6, >= 3.6.0, <= 3.6.10, >= 3.5.0, <= 3.5.9, >= 2.7.0, <= 2.7.17

More on this CVE

NVD↗GitHub Advisory↗

NVD

Python

Visual Studio MarketplacePython language support with extension access points for IntelliSense (Pylance), Debugging (Python Debugger), linting, formatting, refactoring, unit tests, and more.

>= 3.8.0, <= 3.8.1, >= 3.7.0, <= 3.7.6, >= 3.6.0, <= 3.6.10, >= 3.5.0, <= 3.5.9, >= 2.7.0, <= 2.7.17NVD