https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:56:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10887 bdu:2024-10887 https://cve.radiocsirt.org/vuln/bdu:2024-10887 https://cve.radiocsirt.org/vuln/brew-icloudpd-cve-2024-49769 <p><strong>Affected:</strong> Homebrew: icloudpd</p> <p>### Impact</p> <p>When a remote client closes the connection before waitress has had the opportunity to call `getpeername()` waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function.</p> <p>A remote attacker could run waitress out of available sockets with very little resources required.</p> <p>### Patches</p> <p>Waitress 3.0.1 contains fixes that remove the race condition.</p> <p>### Workarounds</p> <p>No work-around.</p> <p>### References</p> <p>- https://github.com/Pylons/waitress/issues/418 - https://github.com/Pylons/waitress/pull/435</p> <p><strong>Affected:</strong> Homebrew: icloudpd</p> <p>### Impact</p> <p>When a remote client closes the connection before waitress has had the opportunity to call `getpeername()` waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function.</p> <p>A remote attacker could run waitress out of available sockets with very little resources required.</p> <p>### Patches</p> <p>Waitress 3.0.1 contains fixes that remove the race condition.</p> <p>### Workarounds</p> <p>No work-around.</p> <p>### References</p> <p>- https://github.com/Pylons/waitress/issues/418 - https://github.com/Pylons/waitress/pull/435</p> https://cve.radiocsirt.org/vuln/brew-icloudpd-cve-2024-49769 https://cve.radiocsirt.org/vuln/euvd-2026-202266 EUVD-2026-202266 https://cve.radiocsirt.org/vuln/euvd-2026-202266 https://cve.radiocsirt.org/vuln/fkie_cve-2024-49769 <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-49769 https://cve.radiocsirt.org/vuln/ghsa-3f84-rpwh-47g6 <p><strong>Affected:</strong> PyPI: waitress</p> <p>### Impact</p> <p>When a remote client closes the connection before waitress has had the opportunity to call `getpeername()` waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function.</p> <p>A remote attacker could run waitress out of available sockets with very little resources required.</p> <p>### Patches</p> <p>Waitress 3.0.1 contains fixes that remove the race condition.</p> <p>### Workarounds</p> <p>No work-around.</p> <p>### References</p> <p>- https://github.com/Pylons/waitress/issues/418 - https://github.com/Pylons/waitress/pull/435</p> <p><strong>Affected:</strong> PyPI: waitress</p> <p>### Impact</p> <p>When a remote client closes the connection before waitress has had the opportunity to call `getpeername()` waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function.</p> <p>A remote attacker could run waitress out of available sockets with very little resources required.</p> <p>### Patches</p> <p>Waitress 3.0.1 contains fixes that remove the race condition.</p> <p>### Workarounds</p> <p>No work-around.</p> <p>### References</p> <p>- https://github.com/Pylons/waitress/issues/418 - https://github.com/Pylons/waitress/pull/435</p> https://cve.radiocsirt.org/vuln/ghsa-3f84-rpwh-47g6 https://cve.radiocsirt.org/vuln/msrc_cve-2024-49769 msrc_CVE-2024-49769 https://cve.radiocsirt.org/vuln/msrc_cve-2024-49769 https://cve.radiocsirt.org/vuln/oesa-2024-2374 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-waitress</p> <p>Waitress is meant to be a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. It runs on CPython on Unix and Windows under Python 2.7+ and Python 3.5+. It is also known to run on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1. Security Fix(es): (CVE-2024-49769)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-waitress</p> <p>Waitress is meant to be a production-quality pure-Python WSGI server with very acceptable performance. It has no dependencies except ones which live in the Python standard library. It runs on CPython on Unix and Windows under Python 2.7+ and Python 3.5+. It is also known to run on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1. Security Fix(es): (CVE-2024-49769)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2374 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14445-1 <p>python310-waitress-3.0.1-1.1 on GA media</p> <p>python310-waitress-3.0.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14445-1 https://cve.radiocsirt.org/vuln/pysec-2024-211 <p><strong>Affected:</strong> PyPI: waitress</p> <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> <p><strong>Affected:</strong> PyPI: waitress</p> <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> https://cve.radiocsirt.org/vuln/pysec-2024-211 https://cve.radiocsirt.org/vuln/rhsa-2024:10145 <p>waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion</p> <p>waitress: python-waitress: request processing race condition in HTTP pipelining with invalid first request waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10145 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-49769 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: waitress, Ubuntu:18.04:LTS: waitress, Ubuntu:20.04:LTS: waitress, Ubuntu:22.04:LTS: waitress, Ubuntu:Pro:24.04:LTS: waitress</p> <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: waitress, Ubuntu:18.04:LTS: waitress, Ubuntu:20.04:LTS: waitress, Ubuntu:22.04:LTS: waitress, Ubuntu:Pro:24.04:LTS: waitress</p> <p>Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won&#39;t correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-49769 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3488 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3488