Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Python Subscribe
Filtered by product Python Priority Library
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-6580 1 Python 1 Python Priority Library 2017-01-27 5.0 MEDIUM 7.5 HIGH
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority information for each stream, and would therefore allocate unbounded amounts of memory. Attempting to actually use a tree like this would also cause extremely high CPU usage to maintain the tree.