Intel

AIKIDO-2024-10041

cheroot is vulnerable to Denial of Service (DoS)

Denial of Service (DoS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Apr 23, 2024

50

Medium Risk

This Affects:

pythoncheroot
5.0.0 - 10.0.0
Fixed in 10.0.1
Are you affected? Scan for Free

TL;DR

The affected versions may cause a Denial of Service (DoS) due to unhandled SSL exceptions, which can lead to worker thread crashes and, eventually, render the server unresponsive.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

cheroot is vulnerable to Denial of Service (DoS) in versions 5.0.0 - 10.0.0.

How to fix this

Upgrade the cheroot library to the patch version.