python / python/cpython

urllib http client vulnerable to DOS attack

Open
#89,953 12 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

3.10 3.11 3.12 stdlib type-feature
Dominant language
Python
Stars
77.2k
Forks
36k
PR merge metrics
PR metrics pending

Description

BPO 45795
Nosy @orsenthil, @tiran, @blind-intruder
Files
  • server.py: server.py file to start a evil server
  • max_time.png
  • curl.png
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2021-11-12.15:55:25.359>
    labels = ['type-security', 'library', '3.10']
    title = 'urllib http client vulnerable to DOS attack'
    updated_at = <Date 2021-11-26.16:05:09.328>
    user = 'https://github.com/blind-intruder'
    

    bugs.python.org fields:

    activity = <Date 2021-11-26.16:05:09.328>
    actor = 'orsenthil'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['Library (Lib)']
    creation = <Date 2021-11-12.15:55:25.359>
    creator = 'haqsek2'
    dependencies = []
    files = ['50436', '50448', '50449']
    hgrepos = []
    issue_num = 45795
    keywords = []
    message_count = 10.0
    messages = ['406220', '406349', '406519', '406531', '406532', '406537', '406543', '406556', '407047', '407061']
    nosy_count = 3.0
    nosy_names = ['orsenthil', 'christian.heimes', 'haqsek2']
    pr_nums = []
    priority = 'normal'
    resolution = None
    stage = None
    status = 'open'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue45795'
    versions = ['Python 3.10']
    

    Contributor guide

    Open the contributing guide

    First steps

    1. Read the whole issue, then the project's contributing guide.
    2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
    3. Fork the repository and make your change on a branch.
    4. Open a pull request that references the issue number.

    Research direction

    Start with the uploaded server.py reproduction and the urllib HTTP client behavior it targets; the issue also includes max_time.png and curl.png as observed results. Determine the vulnerable request-handling path and verify that the supplied evil-server scenario no longer causes a denial of service.

    Written by the indexing model from the issue text.

    Assessment

    Tech stack
    python
    Domain
    networking, security
    Issue type
    Bug
    Difficulty
    4/5
    Estimated time
    3-5 days
    Activity status
    Stale
    Clarity
    Needs clarification
    Newbie friendliness
    25/100

    Get new issues in your inbox

    A short digest of beginner-friendly GitHub issues.