Vulnerability · Published Sep 3, 2024 · Assigned by PSF
CVE-2024-6232Regular-expression DoS when parsing TarFile headers
High 7.5
In plain English
A high-severity regular-expression denial of service in CPython from Python Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.2%top 17.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | platform-python | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:8 | platform-python-debug | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:8 | platform-python-devel | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python-unversioned-command | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python-unversioned-command | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:9 | python3 | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python3 | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:9 | python3-debug | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:9 | python3-debug | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python3-devel | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python3-devel | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:8 | python3-idle | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-idle | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:9 | python3-idle | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:8 | python3-libs | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-libs | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:9 | python3-libs | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:8 | python3-test | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-test | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python3-test | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:8 | python3-tkinter | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-tkinter | 3.9.19-8.el9_5.1 | ALSA-2024:9468 |
| AlmaLinux:9 | python3-tkinter | 3.9.18-3.el9_4.6 | ALSA-2024:8446 |
| AlmaLinux:8 | python3.11 | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11 | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:9 | python3.11 | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:8 | python3.11-debug | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-debug | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:9 | python3.11-debug | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:8 | python3.11-devel | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-devel | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:9 | python3.11-devel | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:8 | python3.11-idle | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-idle | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:9 | python3.11-idle | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:8 | python3.11-libs | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-libs | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:9 | python3.11-libs | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:8 | python3.11-rpm-macros | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:8 | python3.11-test | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-test | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:9 | python3.11-test | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:8 | python3.11-tkinter | 3.11.10-1.el8_10 | ALSA-2024:8838 |
| AlmaLinux:9 | python3.11-tkinter | 3.11.7-1.el9_4.6 | ALSA-2024:8374 |
| AlmaLinux:9 | python3.11-tkinter | 3.11.9-7.el9_5.1 | ALSA-2024:9450 |
| AlmaLinux:8 | python3.12 | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12 | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12 | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python3.12-debug | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-debug | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12-debug | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python3.12-devel | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-devel | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12-devel | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python3.12-idle | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-idle | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12-idle | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python3.12-libs | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-libs | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12-libs | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python3.12-rpm-macros | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:8 | python3.12-test | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-test | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:9 | python3.12-test | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:8 | python3.12-tkinter | 3.12.6-1.el8_10 | ALSA-2024:8836 |
| AlmaLinux:9 | python3.12-tkinter | 3.12.1-4.el9_4.4 | ALSA-2024:8447 |
| AlmaLinux:9 | python3.12-tkinter | 3.12.5-2.el9_5.1 | ALSA-2024:9451 |
| AlmaLinux:8 | python39 | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-debug | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-devel | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-idle | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2024:8359 |
| AlmaLinux:8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-libs | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-mod_wsgi | 4.7.1-7.module_el8.9.0+3634+fb2a896c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-numpy-doc | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pip | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pip-wheel | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-psycopg2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-psycopg2-doc | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-psycopg2-tests | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-rpm-macros | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2024:8359 |
| AlmaLinux:8 | python39-setuptools | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-setuptools-wheel | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-test | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-tkinter | 3.9.20-1.module_el8.10.0+3902+1690be06 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:8359 |
| AlmaLinux:8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| AlmaLinux:8 | python39-wheel-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:8359 |
| Alpine:v3.20 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-6232 |
| Alpine:v3.21 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-6232 |
| Alpine:v3.22 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-6232 |
| Alpine:v3.23 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-6232 |
| Alpine:v3.24 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-6232 |
| Debian:12 | pypy3 | no fix listed | DEBIAN-CVE-2024-6232 |
| Debian:13 | pypy3 | 7.3.18+dfsg-1 | DEBIAN-CVE-2024-6232 |
| Debian:14 | pypy3 | 7.3.18+dfsg-1 | DEBIAN-CVE-2024-6232 |
| Debian:12 | python3.11 | 3.11.2-6+deb12u4 | DEBIAN-CVE-2024-6232 |
| Debian:13 | python3.13 | 3.13.0~rc2-1 | DEBIAN-CVE-2024-6232 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | pybind11 | 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2024:8359 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-attrs | 0:20.3.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-3.module+el8.10.0+1697+7e517775 | RLSA-2024:8359 |
| Rocky Linux:8 | python-idna | 0:2.10-4.module+el8.10.0+1809+41195054 | RLSA-2024:8359 |
| Rocky Linux:8 | python-iniconfig | 0:1.1.1-2.module+el8.9.0+1332+dd574197 | RLSA-2024:8359 |
| Rocky Linux:8 | python-lxml | 0:4.6.5-1.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-more-itertools | 0:8.5.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-packaging | 0:20.4-4.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-pluggy | 0:0.13.1-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-psutil | 0:5.8.0-4.module+el8.9.0+1357+a3b80af7 | RLSA-2024:8359 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+1660+b5b6f004 | RLSA-2024:8359 |
| Rocky Linux:8 | python-py | 0:1.10.0-1.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-requests | 0:2.25.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-toml | 0:0.10.1-5.module+el8.9.0+1332+dd574197 | RLSA-2024:8359 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+1545+03246da9 | RLSA-2024:8359 |
| Rocky Linux:8 | python-wcwidth | 0:0.2.5-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python3 | 0:3.6.8-67.el8_10.rocky.0 | RLSA-2024:6975 |
| Rocky Linux:8 | python3.11 | 0:3.11.10-1.el8_10 | RLSA-2024:8838 |
| Rocky Linux:9 | python3.11 | 0:3.11.7-1.el9_4.6 | RLSA-2024:8374 |
| Rocky Linux:8 | python3.12 | 0:3.12.6-1.el8_10 | RLSA-2024:8836 |
| Rocky Linux:9 | python3.12 | 0:3.12.1-4.el9_4.4 | RLSA-2024:8447 |
| Rocky Linux:9 | python3.9 | 0:3.9.18-3.el9_4.6 | RLSA-2024:8446 |
| Rocky Linux:8 | python39 | 0:3.9.20-1.module+el8.10.0+1876+829fd4e0 | RLSA-2024:8359 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-9.module+el8.10.0+1721+e52d6351 | RLSA-2024:8359 |
| Rocky Linux:8 | python3x-pyparsing | 0:2.4.7-5.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | python3x-setuptools | 0:50.3.2-6.module+el8.10.0+1861+0f5e39ec | RLSA-2024:8359 |
| Rocky Linux:8 | python3x-six | 0:1.15.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Rocky Linux:8 | scipy | 0:1.5.4-5.module+el8.10.0+1582+bc278001 | RLSA-2024:8359 |
| Ubuntu:22.04:LTS | python2.7 | 2.7.18-13ubuntu1.3 | UBUNTU-CVE-2024-6232 |
| Ubuntu:22.04:LTS | python2.7 | 2.7.18-13ubuntu1.3 | USN-7015-5 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.12-1~22.04.6 | USN-7015-1 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.12-1~22.04.6 | UBUNTU-CVE-2024-6232 |
| Ubuntu:24.04:LTS | python3.12 | 3.12.3-1ubuntu0.2 | UBUNTU-CVE-2024-6232 |
| Ubuntu:24.04:LTS | python3.12 | 3.12.3-1ubuntu0.2 | USN-7015-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Python Software Foundation | CPython | 0 – before 3.8.203.9.0 – before 3.9.203.10.0 – before 3.10.153.11.0 – before 3.11.103.12.0 – before 3.12.63.13.0a1 – before 3.13.0rc2 |
Weakness: CWE-1333 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/python/cpython/pull/121286 patch
- https://github.com/python/cpython/issues/121285 issue-tracking
- https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/ vendor-advisory
- https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06 patch
- https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4 patch
- https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf patch
- https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373 patch
- https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d patch
- https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877 patch
- https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4 patch
- http://www.openwall.com/lists/oss-security/2024/09/03/5
- https://security.netapp.com/advisory/ntap-20241018-0007/
- https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html