PT-2019-15877 · Validator · Validator

Published 2019-12-05 · Updated 2024-06-15 · CVE-2019-19588

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions validators package versions 0.12.2 through 0.12.5

Description The issue arises when the validators.domain function is called with a specifically crafted domain string, causing the program to enter an infinite loop.

Recommendations For versions 0.12.2 through 0.12.5, update to version 0.12.6 to resolve the issue.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2019-19588

GHSA-5QCG-W2CC-XFFW

OPENSUSE-SU-2024:11278-1

OPENSUSE-SU-2024:13811-1

PYSEC-2019-134

Affected Products

Validator

References · 11

• 🔥 https://github.com/kvesteri/validators/issues/86 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19588 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19588 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13811-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5qcg-w2cc-xffw · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-134 · Vendor Advisory
• https://github.com/python-validators/validators/issues/86 · Note
• https://github.com/python-validators/validators · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/validators/PYSEC-2019-134.yaml · Note
• https://suse.com/security/cve/CVE-2019-19588 · Note
• https://github.com/advisories/GHSA-5qcg-w2cc-xffw · Note