Bug 1223726 (CVE-2024-30251)

Summary: VUL-0: CVE-2024-30251: python-aiohttp: infinite loop on specially crafted POST request
Product: [Novell Products] SUSE Security Incidents Reporter: Thomas Leroy <thomas.leroy>
Component: IncidentsAssignee: John Paul Adrian Glaubitz <adrian.glaubitz>
Status: NEW --- QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P3 - Medium CC: abergmann, adrian.glaubitz, camila.matos, rjschwei, stoyan.manolov
Version: unspecifiedFlags: stoyan.manolov: needinfo? (adrian.glaubitz)
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/403974/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-30251:7.5:(AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Comment 2 Alexander Bergmann 2024-05-03 05:38:25 UTC
https://www.openwall.com/lists/oss-security/2024/05/02/4

Public.