Published: 23/03/2021 Updated: 10/12/2021

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pygments pygments
redhat openshift container platform 3.11
redhat openshift container platform 4.0
redhat openstack platform 10.0
redhat software collections -
redhat enterprise linux 7.0
redhat enterprise linux 8.0
fedoraproject fedora 33
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #984664 pygments: CVE-2021-20270 Package: src:pygments; Maintainer for src:pygments is Piotr Ożarowski <piotr@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 6 Mar 2021 19:45:02 UTC Severity: important Tags: security, upstream Found in version pygments/271+d ...

It was discovered that Pygments, a syntax highlighting package written in Python, could be forced into an infinite loop, resulting in denial of service For the stable distribution (buster), this problem has been fixed in version 231+dfsg-1+deb10u1 We recommend that you upgrade your pygments packages For the detailed security status of pygments ...

Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could result in incomplete page/blocking protection, denial of service or cross-site scripting For the stable distribution (buster), these problems have been fixed in version 1:13114-1~deb10u1 We recommend that you upgrade your mediawiki packages F ...

A security issue was found in python-pygments version 15 up to 273 When the SMLLexer gets fed the string "exception", it loops indefinitely, leading to denial of service The issue is fixed in python-pygments version 274 ...

This tool is used for backdoor,shellcode generation,Information retrieval and POC arrangement for various architecture devices

hackebds 🔗中文readme foreword In the process of penetration and vulnerability mining of embedded devices, many problems have been encountered One is that some devices do not have telnetd or ssh services to obtain an interactive shell，Some devices are protected by firewall and cannot be connected to it in the forward direction Reverse_shell is required, and the other

CWE-835 https://bugzilla.redhat.com/show_bug.cgi?id=1922136 https://www.debian.org/security/2021/dsa-4889 https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html https://www.oracle.com/security-alerts/cpuoct2021.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984664 https://nvd.nist.gov https://github.com/doudoudedi/hackEmbedded https://www.debian.org/security/2021/dsa-4870

CVE-2021-20270

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect