PT-2026-29602 · Aiohttp+3 · Aiohttp+3
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
AIOHTTP versions prior to 3.13.4
Description
AIOHTTP, an asynchronous HTTP client/server framework, is susceptible to excessive memory usage due to an unbounded DNS cache. This can potentially lead to a Denial of Service (DoS) situation if an application makes requests to a large number of hosts, causing the DNS cache to grow continuously.
Recommendations
Update to version 3.13.4 or later.
Exploit
Fix
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aiohttp
Linuxmint
Red Os
Ubuntu