Skip to content
Threat Feed
Subscribe

Vendor

Httplib2

1 brief RSS
low advisory

httplib2 Decompression Bomb Denial of Service via Unbounded Gzip/Deflate Handling

A high-severity vulnerability in the `httplib2` Python client library allows a remote attacker to trigger a denial-of-service condition by sending a crafted HTTP response with a small, highly compressed payload that expands excessively upon decompression, causing memory exhaustion or OOM-kill in the client process.

httplib2 +2 denial-of-service vulnerability python client-side
1t 1c