CVE-2021-40839 is a high-severity vulnerability affecting the rencode Python package (through version 1.0.6) and related Fedora products. It allows an unauthenticated remote attacker to trigger an infinite loop during typecode decoding, leading to a denial-of-service condition by consuming CPU and memory resources. While the CVSS score is 7.5, indicating a significant impact, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.0.6CPE matchmatch criteria | cpe:2.3:a:rencode_project:rencode:*:*:*:*:*:python:*:* | ||
34CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | ||
35CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.