AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application
References
| Link | Resource |
|---|---|
| https://github.com/aio-libs/aiohttp/issues/6772 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/aio-libs/aiohttp/issues/6772 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
21 Nov 2024, 07:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/aio-libs/aiohttp/issues/6772 - Exploit, Issue Tracking, Third Party Advisory |
22 Nov 2023, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:aiohttp:aiohttp:3.8.1:*:*:*:*:*:*:* | |
| First Time |
Aiohttp aiohttp
Aiohttp |
07 Nov 2023, 03:48
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application |
Information
Published : 2022-06-23 17:15
Updated : 2024-11-21 07:07
NVD link : CVE-2022-33124
Mitre link : CVE-2022-33124
CVE.ORG link : CVE-2022-33124
JSON object : View
Products Affected
aiohttp
- aiohttp
CWE