id: PYSEC-2018-85
details: python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of
  service via a large POST request.
affected:
- package:
    name: kdcproxy
    ecosystem: PyPI
    purl: pkg:pypi/kdcproxy
  ranges:
  - type: GIT
    repo: https://github.com/latchset/kdcproxy
    events:
    - introduced: '0'
    - fixed: f274aa6787cb8b3ec1cc12c440a56665b7231882
  - type: ECOSYSTEM
    events:
    - introduced: '0'
    - fixed: 0.3.2
  versions:
  - 0.3.1
references:
- type: FIX
  url: https://github.com/latchset/kdcproxy/commit/f274aa6787cb8b3ec1cc12c440a56665b7231882
- type: REPORT
  url: https://bugzilla.redhat.com/show_bug.cgi?id=1245200
- type: ADVISORY
  url: https://github.com/advisories/GHSA-j7c4-2xj8-wm7r
aliases:
- CVE-2015-5159
- GHSA-j7c4-2xj8-wm7r
modified: '2021-08-27T03:22:05.569463Z'
published: '2018-10-30T18:29:00Z'