CVE-2019-19588

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.
Infinite Loop
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
validators_projectvalidators
0.12.2 ≤
𝑥
≤ 0.12.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
validators
bullseye
0.14.2-2
fixed
sid
0.20.0-2
fixed
trixie
0.20.0-2
fixed
bookworm
0.20.0-2
fixed
Common Weakness Enumeration
References
https://github.com/kvesteri/validators/issues/86
https://github.com/kvesteri/validators/issues/86