CVE-2021-3737
A flaw was found in python.
Published Mar 4, 2022 · updated Oct 14, 2026 · python python
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
Timeline
Detection, updates, and resolution for this record.
Mar 4, 2022 · NIST NVD
Detected
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
Affected
- cpe canonical/ubuntu linux14.04
- cpe fedoraproject/fedora33
- cpe netapp/hciversion unspecified
- cpe oracle/communications cloud native core binding support function22.1.3
- cpe python/pythonversion unspecified
- cpe redhat/codeready linux builder8.0
- cpe redhat/codeready linux builder for ibm z systems8.0
- cpe redhat/codeready linux builder for power little endian8.0
- cpe redhat/enterprise linux6.0
Sources
- CVE.orgCVE-2021-3737
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-3737
30-day exploitation probability 13.2%
first.org - NIST NVDCVE-2021-3737
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to syst
nvd.nist.gov