CVE-2023-25577

一、漏洞信息
 漏洞编号：[CVE-2023-25577](https://nvd.nist.gov/vuln/detail/CVE-2023-25577)
 漏洞归属组件：[python-werkzeug](https://gitee.com/src-openeuler/python-werkzeug)
 漏洞归属的版本：0.14.1,1.0.1,2.0.3
 CVSS V3.0分值：
  BaseScore：7.5 High
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug s multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses `request.data`, `request.form`, `request.files`, or `request.get_data(parse_form_data=False)`, it can cause unexpectedly high resource usage. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. Unlimited file parts can use up memory and file handles. If many concurrent requests are sent continuously, this can exhaust or kill all available workers. Version 2.2.3 contains a patch for this issue.
 漏洞公开时间：2023-02-15 04:15:00
 漏洞创建时间：2023-02-15 19:08:37
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-25577
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  |
| security-advisories.github.com | https://github.com/pallets/werkzeug/releases/tag/2.2.3 |  |
| security-advisories.github.com | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 |  |
| security-advisories.github.com | https://security.netapp.com/advisory/ntap-20230818-0003/ |  |
| security-advisories.github.com | https://www.debian.org/security/2023/dsa-5470 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25577 | https://bugzilla.suse.com/show_bug.cgi?id=1208283 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-25577 | https://bugzilla.suse.com/show_bug.cgi?id=1208283 |
| suse_bugzilla | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 | https://bugzilla.suse.com/show_bug.cgi?id=1208283 |
| suse_bugzilla | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 | https://bugzilla.suse.com/show_bug.cgi?id=1208283 |
| suse_bugzilla | https://github.com/pallets/werkzeug/releases/tag/2.2.3 | https://bugzilla.suse.com/show_bug.cgi?id=1208283 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2023:1018 | https://bugzilla.redhat.com/show_bug.cgi?id=2170242 |
| redhat_bugzilla | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 | https://bugzilla.redhat.com/show_bug.cgi?id=2170242 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2023:1281 | https://bugzilla.redhat.com/show_bug.cgi?id=2170242 |
| redhat_bugzilla | https://access.redhat.com/security/cve/cve-2023-25577 | https://bugzilla.redhat.com/show_bug.cgi?id=2170242 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2023:1325 | https://bugzilla.redhat.com/show_bug.cgi?id=2170242 |
| ubuntu | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25577 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://github.com/pallets/werkzeug/releases/tag/2.2.3 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://ubuntu.com/security/notices/USN-5948-1 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2023-25577 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2023-25577 | https://ubuntu.com/security/CVE-2023-25577 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2023-25577 | https://ubuntu.com/security/CVE-2023-25577 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2023-25577 |
| oracle |  | https://www.oracle.com/security-alerts/cpuapr2023.html |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2023-25577 |
| cve_search |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |
| cve_search |  | https://github.com/pallets/werkzeug/releases/tag/2.2.3 |
| cve_search |  | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 |
| cve_search |  | https://www.debian.org/security/2023/dsa-5470 |
| github_advisory | https://nvd.nist.gov/vuln/detail/CVE-2023-25577 | https://github.com/advisories/GHSA-xg9f-g7g7-2323 |
| github_advisory | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 | https://github.com/advisories/GHSA-xg9f-g7g7-2323 |
| github_advisory | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 | https://github.com/advisories/GHSA-xg9f-g7g7-2323 |
| github_advisory | https://github.com/pallets/werkzeug/releases/tag/2.2.3 | https://github.com/advisories/GHSA-xg9f-g7g7-2323 |
| osv | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 | https://osv.dev/vulnerability/PYSEC-2023-58 |
| osv | https://github.com/pallets/werkzeug/releases/tag/2.2.3 | https://osv.dev/vulnerability/PYSEC-2023-58 |
| osv | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 | https://osv.dev/vulnerability/PYSEC-2023-58 |
| nvd | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  |
| nvd | https://github.com/pallets/werkzeug/releases/tag/2.2.3 |  |
| nvd | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 |  |
| redhat | https://access.redhat.com/security/cve/CVE-2023-25577 |  |
| nvd | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  |
| nvd | https://github.com/pallets/werkzeug/releases/tag/2.2.3 |  |
| nvd | https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | security-advisories.github.com |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | suse_bugzilla |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | redhat_bugzilla |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | ubuntu |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | github_advisory |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | osv |
|  |  | https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1 |  | nvd |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
      Werkzeug是一个全面的WSGI网络应用程序库。在 2.2.3 版之前，Werkzeug 的多部分表单数据解析器将解析无限数量的部分，包括文件部分。部分可以是少量字节，但每个部分都需要 CPU 时间来解析，并且可能会使用更多内存作为 Python 数据。如果可以向访问“request.data”、“request.form”、“request.files”或“request.get_data（parse_form_data=False）”的端点发出请求，则可能会导致意外的高资源使用率。这允许攻击者通过将构建的多部分数据发送到将分析数据的终结点来造成拒绝服务。所需的 CPU 时间量可能会阻止工作进程处理合法请求。所需的 RAM 量可能会触发进程的内存不足终止。无限的文件部分可能会耗尽内存和文件句柄。如果连续发送许多并发请求，这可能会耗尽或杀死所有可用的工作线程。版本 2.2.3 包含此问题的修补程序。  
 openEuler评分：
  7.5
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP1(1.0.1):受影响
2.openEuler-20.03-LTS-SP3(1.0.1):受影响
3.openEuler-22.03-LTS(1.0.1):受影响
4.openEuler-22.03-LTS-SP1(2.0.3):受影响
5.openEuler-22.03-LTS-SP2(2.0.3):受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP1(1.0.1):否
2.openEuler-20.03-LTS-SP3(1.0.1):否
3.openEuler-22.03-LTS(1.0.1):否
4.openEuler-22.03-LTS-SP1(2.0.3):否
5.openEuler-22.03-LTS-SP2(2.0.3):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2023-1515

src-openEuler/python-werkzeug
关闭

内容风险标识

评论 (14)

src-openEuler/python-werkzeug关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2023-25577

评论 (14)

搜索帮助

src-openEuler/python-werkzeug
关闭