CVE-2021-3737
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-25)
- CWEs
- CWE-400, CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- fedoraproject:fedora
- netapp:hci
- netapp:management_services_for_element_software
- netapp:netapp_xcp_smb
- netapp:ontap_select_deploy_administration_utility
- netapp:xcp_nfs
- oracle:communications_cloud_native_core_binding_support_function
- oracle:communications_cloud_native_core_network_exposure_function
- oracle:communications_cloud_native_core_policy
- python:python
- redhat:codeready_linux_builder
- redhat:codeready_linux_builder_for_ibm_z_systems
- redhat:codeready_linux_builder_for_power_little_endian
- redhat:enterprise_linux
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_power_little_endian