The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 28a37df6-ba1a-4eed-bb64-623fc8e8dfd0 advisory.

  - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression     Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand     argument is mishandled. (CVE-2022-42969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0681-1 advisory.

  - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression     Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand     argument is mishandled. (CVE-2022-42969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0395-1 advisory.

  - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression     Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand     argument is mishandled. (CVE-2022-42969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0161-1 advisory.

  - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression     Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand     argument is mishandled. (CVE-2022-42969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
174306	FreeBSD : py39-py -- Regular expression Denial of Service vulnerability (28a37df6-ba1a-4eed-bb64-623fc8e8dfd0)	Nessus	FreeBSD Local Security Checks	high
172420	SUSE SLES12 Security Update : python-py (SUSE-SU-2023:0681-1)	Nessus	SuSE Local Security Checks	high
171495	SUSE SLES12 Security Update : python-py (SUSE-SU-2023:0395-1)	Nessus	SuSE Local Security Checks	high
170695	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-py (SUSE-SU-2023:0161-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-42969

high

Tenable Plugins

high

high

high

high