1. Home
  2. CVE Database
  3. CVE-2021-28667
HIGH · 7.5

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an atte...

Vulnerability Description

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name).

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
StackstormStackstorm< 3.4.1
PythonPython< 3.0.0

Related Weaknesses (CWE)

CWE-835

References

FAQ

What is CVE-2021-28667?

CVE-2021-28667 is a vulnerability with a CVSS score of 7.5 (HIGH). StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an atte...

How severe is CVE-2021-28667?

CVE-2021-28667 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-28667?

Check the references section above for vendor advisories and patch information. Affected products include: Stackstorm Stackstorm, Python Python.