CVE-2024-7592: Quadratic complexity parsing cookies with backslashes
Last updated 19 September 2024
Other sources
Quadratic complexity parsing cookies with backslashes
— Microsoft
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module.
When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7592?
CVE-2024-7592 is classified as a LOW severity vulnerability.
How do I fix CVE-2024-7592?
To fix CVE-2024-7592, update to the recommended versions of Python provided by the affected software vendor.
Which versions of Python are affected by CVE-2024-7592?
CVE-2024-7592 affects specific versions of Python from 3.9.2 up to 3.12.5, including certain alpha and beta releases of 3.13.
What impact does CVE-2024-7592 have on applications?
CVE-2024-7592 can potentially lead to improper handling of backslashes in cookie values, which may affect application behavior.
Where can I find more information about CVE-2024-7592?
Further details about CVE-2024-7592 can be found in security advisories and vulnerability databases.