CVE-2022-33124

AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS)

published June 22, 2022

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: multiple third parties dispute this issue because there is no example of a context in which denial of service would occur, and many common contexts have exception handing in the calling application

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00719 · 53.4th percentile
Published
2022-06-22T19:44Z
EPSS history
Timeline
  • 22 JUN 19:44Z
    AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS)
    cvelistv5