AIOHTTP Denial-of-Service Vulnerability via Uncontrolled Memory Exhaustion

A denial-of-service vulnerability has been identified in AIOHTTP, an asynchronous HTTP client/server framework for Python. This issue affects versions through 3.13.2. The vulnerability arises when a request is crafted to exploit the server's memory management, particularly in handlers that utilize the Request.post() method. An attacker can cause the server to freeze by overwhelming its memory resources.

Impact

Exploitation of this vulnerability can lead to server freezing by exhausting available memory resources, causing a denial-of-service condition.

Remediation

Users can upgrade to AIOHTTP version 3.13.3 to address this vulnerability.