Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-4260

Опубликовано: 03 июл. 2024
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2024-4260: python-idna security update (MODERATE)

[2.5-7]

  • Fix patch application for security fix for CVE-2024-3651 Resolves: RHEL-32703

[2.5-6]

  • Security fix for CVE-2024-3651 Resolves: RHEL-32703

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

python3-idna

2.5-7.el8_10

Oracle Linux x86_64

python3-idna

2.5-7.el8_10

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
12 месяцев назад

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

CVSS3: 6.5
redhat
около 1 года назад

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

CVSS3: 7.5
nvd
12 месяцев назад

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

CVSS3: 7.5
msrc
10 месяцев назад

Описание отсутствует

CVSS3: 7.5
debian
12 месяцев назад

A vulnerability was identified in the kjd/idna library, specifically w ...