Количество 10
Количество 10
CVE-2023-41105
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
CVE-2023-41105
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
CVE-2023-41105
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
CVE-2023-41105
An issue was discovered in Python 3.11 through 3.11.4. If a path conta ...
GHSA-65fx-pmw6-rcfm
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
BDU:2024-09261
Уязвимость функции os.path.normpath() интерпретатора языка программирования Python, связанная с обходом списка разрешений при усечении пути посредством вставки нулевого байта, позволяющая нарушителю нарушить целостность защищаемой информации
SUSE-SU-2023:3943-1
Security update for python311
SUSE-SU-2023:3939-1
Security update for python3
ELSA-2023-7024
ELSA-2023-7024: python3.11 security update (MODERATE)
ELSA-2023-6494
ELSA-2023-6494: python3.11 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-41105 An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
 | CVE-2023-41105 An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
 | CVE-2023-41105 An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
| CVE-2023-41105 An issue was discovered in Python 3.11 through 3.11.4. If a path conta ... | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
| GHSA-65fx-pmw6-rcfm An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x. | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
 | BDU:2024-09261 Уязвимость функции os.path.normpath() интерпретатора языка программирования Python, связанная с обходом списка разрешений при усечении пути посредством вставки нулевого байта, позволяющая нарушителю нарушить целостность защищаемой информации | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2023:3943-1 Security update for python311 | больше 1 года назад | ||
| SUSE-SU-2023:3939-1 Security update for python3 | больше 1 года назад | ||
| ELSA-2023-7024 ELSA-2023-7024: python3.11 security update (MODERATE) | больше 1 года назад | ||
| ELSA-2023-6494 ELSA-2023-6494: python3.11 security update (MODERATE) | больше 1 года назад |
Уязвимостей на страницу