CVE-2021-3737: canonical ubuntu_linux Loop with Unreachable Exit Condition

Vulnerability summary

CVE-2021-3737 is a high (CVSS 7.5) Loop with Unreachable Exit Condition vulnerability in canonical ubuntu_linux. EPSS estimates a 13.17% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 04-03-2022
   PublishedVulnerability first disclosed.
2. 14-10-2026
   Last modifiedVulnerability information updated.

Description

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

• CWE-835Loop with Unreachable Exit ConditionThe product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
• CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.