CVE-2022-33977

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/stchris/untangle	Product Third Party Advisory
https://github.com/stchris/untangle/releases/tag/1.2.1	Release Notes Third Party Advisory
https://jvn.jp/en/jp/JVN30454777/	Third Party Advisory
https://github.com/stchris/untangle	Product Third Party Advisory
https://github.com/stchris/untangle/releases/tag/1.2.1	Release Notes Third Party Advisory
https://jvn.jp/en/jp/JVN30454777/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:untangle_project:untangle:*:*:*:*:*:python:*:*

History

21 Nov 2024, 07:08

Type	Values Removed	Values Added
References	~~() https://github.com/stchris/untangle - Product, Third Party Advisory~~	() https://github.com/stchris/untangle - Product, Third Party Advisory
References	~~() https://github.com/stchris/untangle/releases/tag/1.2.1 - Release Notes, Third Party Advisory~~	() https://github.com/stchris/untangle/releases/tag/1.2.1 - Release Notes, Third Party Advisory
References	~~() https://jvn.jp/en/jp/JVN30454777/ - Third Party Advisory~~	() https://jvn.jp/en/jp/JVN30454777/ - Third Party Advisory

Information

Published : 2022-07-26 06:15

Updated : 2024-11-21 07:08

NVD link : CVE-2022-33977

Mitre link : CVE-2022-33977

CVE.ORG link : CVE-2022-33977

JSON object : View

Products Affected

untangle_project

untangle

CWE

CWE-776

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

{"id": "CVE-2022-33977", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-07-26T06:15:08.957", "references": [{"url": "https://github.com/stchris/untangle", "tags": ["Product", "Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://github.com/stchris/untangle/releases/tag/1.2.1", "tags": ["Release Notes", "Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN30454777/", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://github.com/stchris/untangle", "tags": ["Product", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/stchris/untangle/releases/tag/1.2.1", "tags": ["Release Notes", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://jvn.jp/en/jp/JVN30454777/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-776"}]}], "descriptions": [{"lang": "en", "value": "untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running."}, {"lang": "es", "value": "untangle es una biblioteca de python para convertir datos XML en objetos de python. untangle versiones 1.2.0 y anteriores restringen inapropiadamente las referencias a entidades recursivas en los DTD. Al explotar esta vulnerabilidad, un atacante remoto no autenticado puede causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en el servidor donde es ejecutado el producto.\n"}], "lastModified": "2024-11-21T07:08:42.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:untangle_project:untangle:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "EE28162D-2C6D-4E0F-97EC-4E4C84A199EA", "versionEndIncluding": "1.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}