The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;x2fx7f), enabling a remote attack that consumes CPU and memory.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rencode | Rencode_project | * | 1.0.6 (including) |
| Python-rencode | Ubuntu | bionic | * |
| Python-rencode | Ubuntu | hirsute | * |
| Python-rencode | Ubuntu | impish | * |
| Python-rencode | Ubuntu | kinetic | * |
| Python-rencode | Ubuntu | trusty | * |
| Python-rencode | Ubuntu | upstream | * |
| Python-rencode | Ubuntu | xenial | * |