GHSA-74xw-gwfm-7pv7

bounter Null pointer reference

Source: GitHub Advisory Database (reviewed) High CVE-2021-41497

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	bounter	<= 1.2.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-41497 advisory
https://github.com/RaRe-Technologies/bounter/issues/47 web
https://github.com/RaRe-Technologies/bounter package
https://github.com/pypa/advisory-database/tree/main/vulns/bounter/PYSEC-2021-880.yaml web