CVE:CVE-2021-3733
CNNVD:CNNVD-202109-1139
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
python urllib的AbstractBasicAuthHandler类中存在资源管理错误漏洞，该漏洞源于产品中为能正确处理RCFS（正则表达式拒绝服务）。攻击者可通过该漏洞导致拒绝服务。
solution:Upgrade python python to a higher version than 3.6.14,3.7.11,3.8.10,3.9.5,3.10.0,and avoid the version (,3.6.14),[3.7.0,3.7.11),[3.8.0,3.8.10),[3.9.0,3.9.5),3.10.0; Upgrade redhat codeready_linux_builder to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat codeready_linux_builder_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat codeready_linux_builder_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.4,and avoid the version 8.4; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,36,and avoid the version 33,34,35,36; Upgrade netapp management_services_for_element_software_and_netapp_hci to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -