CVE-2022-45061

NameCVE-2022-45061
DescriptionAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
python3.10 (PTS)bookworm, sid3.10.8-3vulnerable
python3.11 (PTS)bookworm, sid3.11.0-3vulnerable
python3.7 (PTS)buster3.7.3-2+deb10u3vulnerable
buster (security)3.7.3-2+deb10u4vulnerable
python3.9 (PTS)bullseye3.9.2-1vulnerable
sid3.9.13-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
python3.10source(unstable)(unfixed)
python3.11source(unstable)(unfixed)
python3.7source(unstable)(unfixed)
python3.9source(unstable)(unfixed)

Notes

[bullseye] - python3.9 <no-dsa> (Minor issue)
[buster] - python3.7 <postponed> (Minor issue; fix along with next DLA)
https://github.com/python/cpython/issues/98433
https://github.com/python/cpython/pull/99092
https://github.com/python/cpython/commit/a6f6c3a3d6f2b580f2d87885c9b8a9350ad7bf15 (3.11-branch)
https://github.com/python/cpython/commit/9bb8e18ca46fe66fa6802602f8a7228a24dd785f (3.10-branch)
https://github.com/python/cpython/pull/99230 (3.9-branch)
https://github.com/python/cpython/pull/99231 (3.8-branch)
https://github.com/python/cpython/commit/b0b590be9597fd5919228d251812dd54145f70a7 (3.7-branch)

Search for package or bug name: Reporting problems