CVE-2022-40898

NameCVE-2022-40898
DescriptionAn issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
wheel (PTS)buster0.32.3-2vulnerable (unimportant)
bullseye0.34.2-1vulnerable (unimportant)
bookworm0.38.4-2fixed
sid, trixie0.43.0-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
wheelsource(unstable)0.38.0-1unimportant

Notes

https://github.com/pypa/wheel/commit/88f02bc335d5404991e532e7f3b0fc80437bf4e0
https://github.com/pypa/wheel/issues/498
Negligible security impact

Search for package or bug name: Reporting problems