Логотип exploitDog
bind:"CVE-2024-6923" OR bind:"CVE-2024-6232" OR bind:"CVE-2024-4032"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2024-6923" OR bind:"CVE-2024-6232" OR bind:"CVE-2024-4032"

Количество 74

Количество 74

github логотип

GHSA-87qc-q3w7-7m8w

11 месяцев назад

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

CVSS3: 5.5
EPSS: Низкий
oracle-oval логотип

ELSA-2024-6179

10 месяцев назад

ELSA-2024-6179: python3.11 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6163

10 месяцев назад

ELSA-2024-6163: python3.9 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-6146

10 месяцев назад

ELSA-2024-6146: python3.12 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3302-1

9 месяцев назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3293-1

9 месяцев назад

Security update for python36

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3076-1

10 месяцев назад

Security update for python39

EPSS: Низкий
ubuntu логотип

CVE-2024-4032

около 1 года назад

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-4032

около 1 года назад

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-4032

около 1 года назад

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-4032

3 месяца назад

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-4032

около 1 года назад

The \u201cipaddress\u201d module contained incorrect information about ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2024-6232

10 месяцев назад

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-6232

10 месяцев назад

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-6232

10 месяцев назад

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-6232

9 месяцев назад

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-6232

10 месяцев назад

There is a MEDIUM severity vulnerability affecting CPython. Regul ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2959-1

10 месяцев назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2414-1

11 месяцев назад

Security update for python310

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:2254-1

12 месяцев назад

Security update for python310

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-87qc-q3w7-7m8w

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

CVSS3: 5.5
0%
Низкий
11 месяцев назад
oracle-oval логотип
ELSA-2024-6179

ELSA-2024-6179: python3.11 security update (MODERATE)

10 месяцев назад
oracle-oval логотип
ELSA-2024-6163

ELSA-2024-6163: python3.9 security update (MODERATE)

10 месяцев назад
oracle-oval логотип
ELSA-2024-6146

ELSA-2024-6146: python3.12 security update (MODERATE)

10 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3302-1

Security update for python3

9 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3293-1

Security update for python36

9 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3076-1

Security update for python39

10 месяцев назад
ubuntu логотип
CVE-2024-4032

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 7.5
1%
Низкий
около 1 года назад
redhat логотип
CVE-2024-4032

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 3.7
1%
Низкий
около 1 года назад
nvd логотип
CVE-2024-4032

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

CVSS3: 7.5
1%
Низкий
около 1 года назад
msrc логотип
CVSS3: 7.5
1%
Низкий
3 месяца назад
debian логотип
CVE-2024-4032

The \u201cipaddress\u201d module contained incorrect information about ...

CVSS3: 7.5
1%
Низкий
около 1 года назад
ubuntu логотип
CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
1%
Низкий
10 месяцев назад
redhat логотип
CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
1%
Низкий
10 месяцев назад
nvd логотип
CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS3: 7.5
1%
Низкий
10 месяцев назад
msrc логотип
CVSS3: 7.5
1%
Низкий
9 месяцев назад
debian логотип
CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regul ...

CVSS3: 7.5
1%
Низкий
10 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:2959-1

Security update for python3

1%
Низкий
10 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:2414-1

Security update for python310

1%
Низкий
11 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:2254-1

Security update for python310

1%
Низкий
12 месяцев назад

Уязвимостей на страницу