- Vulnerability/
- USN-5201-1
USN-5201-1: Python vulnerabilities
First published: Fri Dec 17 2021(Updated: )
It was discovered that the Python urllib http client could enter into an infinite loop when incorrectly handling certain server responses (100 Continue response). Specially crafted traffic from a malicious HTTP server could cause a denial of service (Dos) condition for a client.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/python3.9-minimal | <3.9.5-3ubuntu0~21.04.1 | 3.9.5-3ubuntu0~21.04.1 |
| Ubuntu Ubuntu | =21.04 | |
| All of | ||
| ubuntu/libpython3.9-stdlib | <3.9.5-3ubuntu0~21.04.1 | 3.9.5-3ubuntu0~21.04.1 |
| Ubuntu Ubuntu | =21.04 | |
| All of | ||
| ubuntu/python3.9 | <3.9.5-3ubuntu0~21.04.1 | 3.9.5-3ubuntu0~21.04.1 |
| Ubuntu Ubuntu | =21.04 | |
| All of | ||
| ubuntu/python3.9-minimal | <3.9.5-3ubuntu0~20.04.1 | 3.9.5-3ubuntu0~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/python3.9 | <3.9.5-3ubuntu0~20.04.1 | 3.9.5-3ubuntu0~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/libpython3.8-stdlib | <3.8.10-0ubuntu1~20.04.2 | 3.8.10-0ubuntu1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/python3.8 | <3.8.10-0ubuntu1~20.04.2 | 3.8.10-0ubuntu1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/python3.8-minimal | <3.8.10-0ubuntu1~20.04.2 | 3.8.10-0ubuntu1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/libpython3.9-stdlib | <3.9.5-3ubuntu0~20.04.1 | 3.9.5-3ubuntu0~20.04.1 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2021-3737
- https://ubuntu.com/security/notices/USN-5083-1
- https://ubuntu.com/security/notices/USN-5199-1
- https://ubuntu.com/security/notices/USN-5200-1
- https://launchpad.net/ubuntu/+source/python3.9/3.9.5-3ubuntu0~21.04.1
- https://launchpad.net/ubuntu/+source/python3.9/3.9.5-3ubuntu0~20.04.1
- https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.2
- https://ubuntu.com/security/notices/USN-5201-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-5201-1.
What is the title of the advisory?
The title of the advisory is USN-5201-1: Python vulnerabilities.
What is the description of the vulnerability?
The Python urllib http client could enter into an infinite loop when incorrectly handling certain server responses, causing a denial of service (DoS) condition for a client.
Which products are affected by this vulnerability?
The vulnerability affects Ubuntu 21.04 and Ubuntu 20.04.
Where can I find more information about the vulnerability?
You can find more information about the vulnerability in the following references: [CVE-2021-3737](https://ubuntu.com/security/CVE-2021-3737), [USN-5083-1](https://ubuntu.com/security/notices/USN-5083-1), [USN-5199-1](https://ubuntu.com/security/notices/USN-5199-1).
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-5083-1
- anchor-related/USN-5199-1
- anchor-related/USN-5200-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/21.04
- version/ubuntu ubuntu/20.04