Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
Critical Python 3.11 patch for #SUSE/#openSUSE. Fixes CVE-2025-12084 (DoS), CVE-2025-13836 (HTTP attack), CVE-2025-13837 (OOM). Patch now: zypper patch. Read more: 👉 https://tinyurl.com/cfmna2d6 #Security https://t.co/6WmUY6Vfz2
Post summary
SUSE/OpenSUSE releases a critical Python 3.11 patch addressing three CVEs (DoS, HTTP attack, OOM), with instructions to apply via zypper and a link for more information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | python | python | - | - | - |
| App | python | python | 3.14.0 | - | - |
| App | python | python | 3.15.0 | - | - |
| App | python | python | 3.15.0 | - | - |