CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21240

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.045

EPSS Ranking 88.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-21240

Httplib2 Project » Httplib2 » Version: 0.10.1

cpe:2.3:a:httplib2_project:httplib2:0.10.1
Httplib2 Project » Httplib2 » Version: 0.10.2

cpe:2.3:a:httplib2_project:httplib2:0.10.2
Httplib2 Project » Httplib2 » Version: 0.10.3

cpe:2.3:a:httplib2_project:httplib2:0.10.3
Httplib2 Project » Httplib2 » Version: 0.11.0

cpe:2.3:a:httplib2_project:httplib2:0.11.0
Httplib2 Project » Httplib2 » Version: 0.11.1

cpe:2.3:a:httplib2_project:httplib2:0.11.1
Httplib2 Project » Httplib2 » Version: 0.11.2

cpe:2.3:a:httplib2_project:httplib2:0.11.2
Httplib2 Project » Httplib2 » Version: 0.11.3

cpe:2.3:a:httplib2_project:httplib2:0.11.3
Httplib2 Project » Httplib2 » Version: 0.12.0

cpe:2.3:a:httplib2_project:httplib2:0.12.0
Httplib2 Project » Httplib2 » Version: 0.12.1

cpe:2.3:a:httplib2_project:httplib2:0.12.1
Httplib2 Project » Httplib2 » Version: 0.12.3

cpe:2.3:a:httplib2_project:httplib2:0.12.3
Httplib2 Project » Httplib2 » Version: 0.13.0

cpe:2.3:a:httplib2_project:httplib2:0.13.0
Httplib2 Project » Httplib2 » Version: 0.13.1

cpe:2.3:a:httplib2_project:httplib2:0.13.1
Httplib2 Project » Httplib2 » Version: 0.14.0

cpe:2.3:a:httplib2_project:httplib2:0.14.0
Httplib2 Project » Httplib2 » Version: 0.15.0

cpe:2.3:a:httplib2_project:httplib2:0.15.0
Httplib2 Project » Httplib2 » Version: 0.16.0

cpe:2.3:a:httplib2_project:httplib2:0.16.0
Httplib2 Project » Httplib2 » Version: 0.17.0

cpe:2.3:a:httplib2_project:httplib2:0.17.0
Httplib2 Project » Httplib2 » Version: 0.17.1

cpe:2.3:a:httplib2_project:httplib2:0.17.1
Httplib2 Project » Httplib2 » Version: 0.17.2

cpe:2.3:a:httplib2_project:httplib2:0.17.2
Httplib2 Project » Httplib2 » Version: 0.17.3

cpe:2.3:a:httplib2_project:httplib2:0.17.3
Httplib2 Project » Httplib2 » Version: 0.17.4

cpe:2.3:a:httplib2_project:httplib2:0.17.4
Httplib2 Project » Httplib2 » Version: 0.18.0

cpe:2.3:a:httplib2_project:httplib2:0.18.0
Httplib2 Project » Httplib2 » Version: 0.18.1

cpe:2.3:a:httplib2_project:httplib2:0.18.1
Httplib2 Project » Httplib2 » Version: 0.9

cpe:2.3:a:httplib2_project:httplib2:0.9
Httplib2 Project » Httplib2 » Version: 0.9.1

cpe:2.3:a:httplib2_project:httplib2:0.9.1
Httplib2 Project » Httplib2 » Version: 0.9.2

cpe:2.3:a:httplib2_project:httplib2:0.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21240

Products

Pricing

Contact Us