GHSA-RWQR-C348-M5WR中危已审查已撤回

Withdrawn: Denial of Service in aiohttp

OSV 1.4.0 · github-reviewed · 修改于 2026-06-11 02:43

发布时间

2022-06-24 08:00

GitHub 审查时间

2022-06-25 15:22

NVD 发布时间

2022-06-24 01:15

源文件

advisories/github-reviewed/2022/06/GHSA-rwqr-c348-m5wr/GHSA-rwqr-c348-m5wr.json

该公告已于 2022-06-29 00:39 撤回

内容仅用于保留外部引用，请不要将其当作仍然有效的安全结论。

公告说明

Withdrawn

This advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report.

Original Description

aiohttp v3.8.1 was discovered to contain an invalid IPv6 URL which can lead to a Denial of Service (DoS).

受影响的软件包

PyPI

aiohttp

ECOSYSTEM

引入0最后受影响3.8.1

标识信息

别名 / CVE

CVE-2022-33124

CWE

无

软件生态

PyPI

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

原始 OSV JSON

{
  "id": "GHSA-rwqr-c348-m5wr",
  "aliases": [
    "CVE-2022-33124"
  ],
  "details": "## Withdrawn\nThis advisory has been withdrawn because the maintainers of aiohttp and multiple third parties disputed the validity of the issue. There is not sufficient evidence for the claims in the original report.\n\n## Original Description\naiohttp v3.8.1 was discovered to contain an invalid IPv6 URL which can lead to a Denial of Service (DoS).",
  "summary": "Withdrawn: Denial of Service in aiohttp",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "3.8.1"
            }
          ]
        }
      ],
      "package": {
        "name": "aiohttp",
        "ecosystem": "PyPI"
      }
    }
  ],
  "modified": "2026-06-10T18:43:31Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
    }
  ],
  "published": "2022-06-24T00:00:31Z",
  "withdrawn": "2022-06-28T16:39:06Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-33124",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/aio-libs/aiohttp/issues/6772",
      "type": "WEB"
    },
    {
      "url": "https://github.com/aio-libs/aiohttp",
      "type": "PACKAGE"
    },
    {
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/aiohttp/PYSEC-2022-43059.yaml",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": "2022-06-23T17:15:00Z",
    "github_reviewed_at": "2022-06-25T07:22:37Z"
  }
}