CVE-2025-13836

MEDIUM

Security Bulletin: Vulnerabilities in python affects IBM Netezza Appliance

Details

CVSS v3: 7.5
CVSS v4: 6.3
NVD published: 2025-12-01 18:16:04
EPSS: 0.2% probability · 41.5th percentile — 2026-04-22
Affected versions: cpe:2.3:a:python:python:*:*:*:*:*:*:*:* cpe:2.3:a:python:python:3.14.0:-:*:*:*:*:*:* cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:* cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*
Summary: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
Remediation: Not available in our cache.
Exploit info: Not available in our cache.

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.