This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-3737 →

DEBIAN-CVE-2021-3737

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP s...

Original description

The description as published by the source.

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pypy3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.8+dfsg-1"}]}]

Debian:13 pypy3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.8+dfsg-1"}]}]

Debian:14 pypy3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.8+dfsg-1"}]}]

References

advisory security-tracker.debian.org