Denial of Service Vulnerability in Universal Feed Parser
Summary
CVE-2011-1156: feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration. Affects feedparser versions < 5.0.1-1. Fixed in 5.0.1-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Universal Feed Parser is a Python library used for parsing RSS and Atom feeds. It provides a convenient way to extract and process feed data. However, versions prior to 5.0.1 are vulnerable to a denial of service attack. This vulnerability can be exploited by sending a malformed DOCTYPE declaration, causing the application to crash.
Vulnerability Detail
The vulnerability (CVE-2011-1156) originates from a flaw in the feedparser.py module of Universal Feed Parser. By sending a specially crafted DOCTYPE declaration, an attacker can trigger an application crash. This can lead to a denial of service, disrupting the normal operation of the affected application. The vulnerability has a low urgency rating.
How To Fix
Minimum fixed version
5.0.1-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade feedparserTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the Universal Feed Parser library prior to version 5.0.1 is vulnerable to a denial of service attack. To mitigate this vulnerability, it is recommended to update the library to the latest version. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for feedparser →
FAQ
Universal Feed Parser is a Python library used for parsing RSS and Atom feeds. It provides a convenient way to extract and process feed data.
The vulnerability can be exploited to cause a denial of service, resulting in an application crash.
To fix this vulnerability, update the Universal Feed Parser library to version 5.0.1 or later.
No specific workaround has been mentioned for this vulnerability.
The vulnerability has a low urgency rating.
Related vulnerabilities
Recent vulnerabilities recorded for feedparser.
