The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - python: tarfile module directory traversal (CVE-2007-4559)

  - python: RecursionError: maximum recursion depth exceeded while calling a Python object (CVE-2023-36632)

  - Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource     consumption) via a ZIP bomb. (CVE-2019-9674)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - python: RecursionError: maximum recursion depth exceeded while calling a Python object (CVE-2023-36632)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K000139698 advisory.

  - Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before     3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size     value, which triggers a heap-based buffer overflow. (CVE-2016-5636)

  - The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger     RecursionError: maximum recursion depth exceeded while calling a Python object via a crafted argument.
    This argument is plausibly an untrusted value from an application's input data that was supposed to     contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the     documentation of the Python email package. Applications should instead use the email.parser.BytesParser or     email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a     bug. The email package is intended to have size limits and to throw an exception when limits are exceeded;
    they were exceeded by the example demonstration code. (CVE-2023-36632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory.

  - Vulnerability in the RDBMS (Python) component of Oracle Database Server. Supported versions that are     affected are 21.3-21.13. Easily exploitable vulnerability allows low privileged attacker having     Authenticated User privilege with network access via Oracle Net to compromise RDBMS (Python). Successful     attacks require human interaction from a person other than the attacker. Successful attacks of this     vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS)     of RDBMS (Python). (CVE-2023-36632) 

  - Vulnerability in the Grid Infrastructure (Apache Mina SSHD) component of Oracle Database Server.   Supported versions that are affected are 21.3-21.13. Difficult to exploit vulnerability allows   unauthenticated attacker with network access via SSH to compromise Grid Infrastructure (Apache Mina SSHD).   Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification   access to critical data or all Grid Infrastructure (Apache Mina SSHD) accessible data. (CVE-2023-48795)

  - Vulnerability in the Oracle SQLcl (Apache Mina SSHD) component of Oracle Database Server. Supported   versions that are affected are 19.3-19.22 and 21.3-21.13. Difficult to exploit vulnerability allows   unauthenticated attacker with network access via SSH to compromise Oracle SQLcl (Apache Mina SSHD).   Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification   access to critical data or all Oracle SQLcl (Apache Mina SSHD) accessible data. (CVE-2023-48795)	

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198333	RHEL 8 : python (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198332	RHEL 9 : python (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
197531	F5 Networks BIG-IP : Python vulnerabilities (K000139698)	Nessus	F5 Networks Local Security Checks	critical
196757	RHEL 6 : python (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196743	RHEL 7 : python (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
193497	Oracle Database Server (Apr 2024 CPU)	Nessus	Databases	critical

Detections

Analytics

CVE-2023-36632

high

Tenable Plugins

high

high

critical

critical

critical

critical