CVE-2023-49082 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-49082 Interim 1 45 2026-03-05T03:33:07Z current 2023-12-01T00:09:01Z 2026-03-05T03:33:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-49082 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible for an attacker to modify the HTTP request (e.g. insert a new header) or even create a new HTTP request if the attacker controls the HTTP method. The vulnerability occurs only if the attacker can control the HTTP method (GET, POST etc.) of the request. If the attacker can control the HTTP version of the request it will be able to modify the request (request smuggling). This issue has been patched in version 3.9.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-January/017713.html E-Mail link for SUSE-SU-2024:0168-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-Hardened-Azure Image SLES15-SP7-SAP-Hardened-BYOS-Azure Image SLES15-SP7-SAPCAL-Azure SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Python 3 15 SP4 openSUSE Leap 15.5 python-aiohttp python-aiohttp-doc python3-aiohttp python311-aiohttp python311-aiohttp-3.8.6-150400.10.11.1 python313-aiohttp-3.11.16-160000.2.2 python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-HPC-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-SAP-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP4-SAPCAL-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-Azure-Basic python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-Azure-Standard python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-HPC-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-SAP-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP5-SAPCAL-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6 python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-Azure-Basic python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-Azure-Standard python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-HPC python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-HPC-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-HPC-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAP-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAP-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAP-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAP-Hardened-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP6-SAPCAL-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-Azure-Basic python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-Azure-Standard python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-HPC-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-HPC-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAP-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAP-Azure-3P python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAP-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAP-Hardened-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAP-Hardened-BYOS-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of Image SLES15-SP7-SAPCAL-Azure python311-aiohttp-3.8.6-150400.10.11.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP5 python311-aiohttp-3.8.6-150400.10.11.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-aiohttp-3.8.6-150400.10.11.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python313-aiohttp-3.11.16-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python311-aiohttp-3.8.6-150400.10.11.1 as a component of openSUSE Leap 15.5 python-aiohttp-doc as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python3-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python-aiohttp as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python311-aiohttp as a component of SUSE Linux Enterprise Module for Python 3 15 SP4 python-aiohttp as a component of SUSE Linux Enterprise Module for Python 3 15 SP4 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible for an attacker to modify the HTTP request (e.g. insert a new header) or even create a new HTTP request if the attacker controls the HTTP method. The vulnerability occurs only if the attacker can control the HTTP method (GET, POST etc.) of the request. If the attacker can control the HTTP version of the request it will be able to modify the request (request smuggling). This issue has been patched in version 3.9.0. CVE-2023-49082 Image SLES15-SP4-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-HPC-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-SAP-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-SAP-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-SAP-Hardened-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP4-SAPCAL-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-Azure-Basic:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-Azure-Standard:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-HPC-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-HPC-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-SAP-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-SAP-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-SAP-Hardened-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP5-SAPCAL-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-Azure-Basic:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-Azure-Standard:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-HPC:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-HPC-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-HPC-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAP-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAP-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAP-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAP-Hardened-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAP-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP6-SAPCAL-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-Azure-Basic:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-Azure-Standard:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-HPC-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-HPC-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAP-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAP-Azure-3P:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAP-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAP-Hardened-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAP-Hardened-BYOS-Azure:python311-aiohttp-3.8.6-150400.10.11.1 Image SLES15-SP7-SAPCAL-Azure:python311-aiohttp-3.8.6-150400.10.11.1 SUSE Linux Enterprise Module for Python 3 15 SP5:python311-aiohttp-3.8.6-150400.10.11.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-aiohttp-3.8.6-150400.10.11.1 SUSE Linux Enterprise Module for Python 3 15 SP7:python311-aiohttp-3.8.6-150400.10.11.1 SUSE Linux Enterprise Server 16.0:python313-aiohttp-3.11.16-160000.2.2 openSUSE Leap 15.5:python311-aiohttp-3.8.6-150400.10.11.1 moderate 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N