Loop with Unreachable Exit Condition ('Infinite Loop') The advisory has been revoked - it doesn't affect any version of package openwsman-perl (opens in a new tab)

Threat Intelligence

15.24% (97^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-SLES150-OPENWSMANPERL-2756703
published14 Apr 2022
disclosed20 Mar 2019

Report a new vulnerability Found a mistake?

Introduced: 20 Mar 2019

CVE-2019-3833 (opens in a new tab) CWE-835 (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.0.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openwsman-perl package and not the openwsman-perl package as distributed by SLES.

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.