UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3737

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

Severity
High 7.5
Published
4 Mar 2022
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.6.14, 3.7.11, 3.8.11, 3.9.6
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.6.0 before 3.6.14
  • From 3.7.0 before 3.7.11
  • From 3.8.0 before 3.8.11
  • From 3.9.0 before 3.9.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3737
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3737