F5-K000148969
First published: Thu Dec 12 2024(Updated: )
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP Next SPK | >=1.7.0<=1.9.2 | |
| F5 BIG-IP Next CNF | >=1.1.0<=1.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/f5-advisory
- source/F5
- alias/CVE-2024-7592
- agent/software-canonical-lookup
- agent/severity
- agent/tags
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/type
- agent/description
- vendor/f5
- canonical/f5 big-ip next spk
- version/f5 big-ip next spk/1.7.0
- version/f5 big-ip next spk/1.9.2
- canonical/f5 big-ip next cnf
- version/f5 big-ip next cnf/1.1.0
- version/f5 big-ip next cnf/1.3.3