Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2022-40899

Published: Dec 23, 2022 | Modified: Jan 23, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-40899
CWEhttps://cwe.mitre.org/data/definitions/.html

An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

Affected Software

Name Vendor Start Version End Version
Python-future Pythoncharmers * 0.18.2 (including)
Red Hat Satellite 6.13 for RHEL 8 RedHat python-future-0:0.18.3-1.el8pc *
Red Hat Satellite 6.13 for RHEL 8 RedHat python-future-0:0.18.3-1.el8pc *
Red Hat Satellite 6.14 for RHEL 8 RedHat python-future-0:0.18.3-1.el8pc *
Red Hat Satellite 6.14 for RHEL 8 RedHat python-future-0:0.18.3-1.el8pc *
RHUI 4 for RHEL 8 RedHat python-future-0:0.18.3-1.0.1.el8ui *
Python-future Ubuntu bionic *
Python-future Ubuntu devel *
Python-future Ubuntu esm-apps/xenial *
Python-future Ubuntu focal *
Python-future Ubuntu jammy *
Python-future Ubuntu kinetic *
Python-future Ubuntu trusty *
Python-future Ubuntu upstream *
Python-future Ubuntu xenial *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use