The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via     ;\x2f\x7f), enabling a remote attack that consumes CPU and memory. (CVE-2021-40839)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via
    ;\x2f\x7f), enabling a remote attack that consumes CPU and memory. (CVE-2021-40839)

ID	Name	Product	Family	Severity
224148	Linux Distros Unpatched Vulnerability : CVE-2021-40839	Nessus	Misc.	high
406705	Alpine: multiple py3-rencode packages: security update to 1.0.6-r7	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406705	Alpine: multiple py3-rencode packages: security update to 1.0.6-r7	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
409869	Alpine: rencode: security update to 1.0.6-r6 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
409869	Alpine: rencode: security update to 1.0.6-r6 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2021-40839

high

Tenable Plugins

high

high

high

high

high