PT-2022-6566 · Unknown+12 · Sqlalchemy+14

Zzzeek · Published 2022-07-09 · Updated 2025-12-03 · CVE-2022-40023

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Sqlalchemy mako versions prior to 1.2.2

Description The issue is related to insufficient input validation when handling regular expressions in the Lexer class, which can be exploited by a remote attacker to launch a denial-of-service attack using specially crafted data. This affects not only Sqlalchemy mako but also babelplugin and linguaplugin.

Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Lexer class to parse regular expressions until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-1333

CWE-185

Related Identifiers

ALSA-2023:2258

ALSA-2023:2893

ALT-PU-2022-2592

ALT-PU-2023-2061

ALT-PU-2023-5599

AZL-10892

BDU:2023-02444

CESA-2023_2893

CVE-2022-40023

DLA-3116-1

DLA-4393-1

GHSA-V973-FXGF-6XHP

INFSA-2023_2258

INFSA-2023_2893

MGASA-2022-0350

OESA-2023-1683

OPENSUSE-SU-2022_3979-1

OPENSUSE-SU-2024:13610-1

PYSEC-2022-260

RHSA-2023:2258

RHSA-2023:2893

RHSA-2023_2258

RHSA-2023_2893

SUSE-SU-2022:3700-1

SUSE-SU-2022:3701-1

SUSE-SU-2022:3979-1

SUSE-SU-2022_3979-1

USN-5625-1

USN-5625-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Sqlalchemy

Suse

Ubuntu

Babelplugin

Linguaplugin

Mako

References · 64

• 🔥 https://github.com/sqlalchemy/mako/blob/c2f392e0be52dc67d1b9770ab8cce6a9c736d547/mako/ext/extract.py#L21 · Exploit
• 🔥 https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages · Exploit
• https://github.com/sqlalchemy/mako/issues/366 · Patch
• https://github.com/sqlalchemy/mako/commit/925760291d6efec64fda6e9dd1fd9cfbd5be068c · Patch
• https://linux.oracle.com/errata/ELSA-2023-2258.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:2258 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13610-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2893 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3700-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5625-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:2893 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0350 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5625-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-2258.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0350.html · Security Note