Skip to content

Commit 64620ea

Browse files
Update the NEWS entry.
1 parent 0f35918 commit 64620ea

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed
Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1-
Fix OOM vulnerability in :mod:`http.server`, when handling the POST request
2-
in the CGI server on Windows could cause consuming an arbitrary amount of
3-
memory.
1+
Fix a potential denial of service in the :mod:`http.server` module.
2+
When a malicious user is connected to the CGI server on Windows, it could cause
3+
an arbitrary amount of memory to be allocated.
4+
In best case this could lead to a :exc:`MemoryError` or other process crash.
5+
In worst case it could lead to swapping which would dramatically slow down the
6+
whole system and make it less responcible.

0 commit comments

Comments
 (0)