7.5High
kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py
Dana Powers kafka-python; Red Hat Red Hat Quay 3.10; Red Hat Red Hat Quay 3.12; Red Hat Red Hat Quay 3.15
kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, Scr…