Log in Start free

Vulnerability · Published Oct 29, 2024 · Assigned by GitHub_M

CVE-2024-49769Waitress has a denial of service leading to high CPU usage/resource exhaustion

High 7.5

In plain English

A high-severity security flaw in waitress from Pylons. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.4%top 27.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt to process. This leads to a busy-loop calling the write function. A remote attacker could run waitress out of available sockets with very little resources required. Waitress 3.0.1 contains fixes that remove the race condition.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12waitress2.1.2-2+deb12u1DEBIAN-CVE-2024-49769
Debian:13waitress3.0.1-1DEBIAN-CVE-2024-49769
Debian:14waitress3.0.1-1DEBIAN-CVE-2024-49769
PyPIwaitress3.0.1GHSA-3f84-rpwh-47g6
PyPIwaitress3.0.1PYSEC-2024-211
Ubuntu:22.04:LTSwaitress1.4.4-1.1ubuntu1.1USN-7115-1
Ubuntu:22.04:LTSwaitress1.4.4-1.1ubuntu1.1UBUNTU-CVE-2024-49769

Affected products (as reported)

VendorProductVersions
Pylons waitress < 3.0.1

Weakness: CWE-772 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References