CVE:CVE-2021-21419
CNNVD:CNNVD-202105-354
Eventlet是Python的一个并发网络库。
Eventlet 0.31.0 之前版本存在资源管理错误漏洞，该漏洞源于一个websocket peer可能会通过发送非常大的websocket帧来耗尽Eventlet端的内存。
solution:Upgrade eventlet eventlet to a higher version than 0.31.0,and avoid the version [0.10,0.31.0); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34