The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10983 advisory.

    [3.9.21-1]
    - Update to 3.9.21
    - Security fix for CVE-2024-11168 and CVE-2024-9287     Resolves: RHEL-64888     Resolves: RHEL-67259

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10983 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

    * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4153-1 advisory.

    - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307)

    Bug fixes:

    - Remove -IVendor/ from python-config. (bsc#1231795)
    - Include renaming :noindex: option to :no-index: in Sphinx 7.2. (bsc#1232750)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4151-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307)

    Other fixes:
    - Add ipaddress module from https://github.com/phihag/ipaddress
    - Remove -IVendor/ from python-config (bsc#1231795)
    - Stop using %%defattr, it seems to be breaking proper executable       attributes on /usr/bin/ scripts (bsc#1227378).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4166-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307)

    Other fixes:
    - Remove -IVendor/ from python-config (bsc#1231795)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4165-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307)

    Other fixes:
    - Add ipaddress module from https://github.com/phihag/ipaddress
    - Remove -IVendor/ from python-config (bsc#1231795)
    - Stop using %%defattr, it seems to be breaking proper executable       attributes on /usr/bin/ scripts (bsc#1227378).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4135-1 advisory.

    - CVE-2024-11168: Improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

    Bug fixes:

    - Remove -IVendor/ from python-config (bsc#1231795).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4169-1 advisory.

    - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307)

    Bug fixes:

    - Remove -IVendor/ from python-config. (bsc#1231795)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4193-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307)

    Other fixes:
    - Remove -IVendor/ from python-config (bsc#1231795)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10779 advisory.

    * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
      * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10779 advisory.

    - Security fix for CVE-2024-11168     Resolves: RHEL-67252

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10779 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

    * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-11168 advisory.

  - The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing     hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled     SSRF if a URL is processed by more than one URL parser. (CVE-2024-11168)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3980 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3980-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     December 02, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u2     CVE ID         : CVE-2015-20107 CVE-2020-10735 CVE-2021-3426 CVE-2021-3733                      CVE-2021-3737 CVE-2021-4189 CVE-2021-28861 CVE-2021-29921                      CVE-2022-42919 CVE-2022-45061 CVE-2023-6597 CVE-2023-24329                      CVE-2023-27043 CVE-2023-40217 CVE-2024-0397 CVE-2024-0450                      CVE-2024-4032 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592                      CVE-2024-8088 CVE-2024-9287 CVE-2024-11168     Debian Bug     : 989195 1070135 1059298 1070133

    Multiple vulnerabilities have been fixed in the Python3 interpreter.

    CVE-2015-20107

        The mailcap module did not add escape characters into commands         discovered in the system mailcap file

    CVE-2020-10735

        Prevent DoS with very large int

    CVE-2021-3426

        Remove the pydoc getfile feature which could be abused to read         arbitrary files on the disk

    CVE-2021-3733

        Regular Expression Denial of Service in urllib's         AbstractBasicAuthHandler class

    CVE-2021-3737

        Infinite loop in the HTTP client code

    CVE-2021-4189

        Make ftplib not trust the PASV response

    CVE-2021-28861

        Open redirection vulnerability in http.server

    CVE-2021-29921

        Leading zeros in IPv4 addresses are no longer tolerated

    CVE-2022-42919

        Don't use Linux abstract sockets for multiprocessing

    CVE-2022-45061

        Quadratic time in the IDNA decoder

    CVE-2023-6597

        tempfile.TemporaryDirectory failure to remove dir

    CVE-2023-24329

        Strip C0 control and space chars in urlsplit

    CVE-2023-27043

        Reject malformed addresses in email.parseaddr()

    CVE-2023-40217

        ssl.SSLSocket bypass of the TLS handshake

    CVE-2024-0397

        Race condition in ssl.SSLContext

    CVE-2024-0450

        Quoted-overlap zipbomb DoS

    CVE-2024-4032

        Incorrect information about private addresses in the ipaddress         module

    CVE-2024-6232

        ReDoS when parsing tarfile headers

    CVE-2024-6923

        Encode newlines in headers in the email module

    CVE-2024-7592

        Quadratic complexity parsing cookies with backslashes

    CVE-2024-8088

        Infinite loop when iterating over zip archive entry names

    CVE-2024-9287

        venv activation scripts did't quote paths

    CVE-2024-11168

        urllib functions improperly validated bracketed hosts

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u2.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-da1b7e1cc5 advisory.

    Security fix for CVE-2024-11168

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c16972785b advisory.

    Security fix for CVE-2024-11168

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Python installed on the remote Windows host is improper validation vulnerability.  The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
212717	Oracle Linux 9 : python3.9:3.9.21 (ELSA-2024-10983)	Nessus	Oracle Linux Local Security Checks	medium
212678	RHEL 9 : python3.9:3.9.21 (RHSA-2024:10983)	Nessus	Red Hat Local Security Checks	medium
212596	openSUSE 15 Security Update : python310 (SUSE-SU-2024:4153-1)	Nessus	SuSE Local Security Checks	medium
212593	SUSE SLES15 / openSUSE 15 Security Update : python (SUSE-SU-2024:4151-1)	Nessus	SuSE Local Security Checks	medium
212590	SUSE SLES12 Security Update : python3 (SUSE-SU-2024:4166-1)	Nessus	SuSE Local Security Checks	medium
212566	SUSE SLES12 Security Update : python (SUSE-SU-2024:4165-1)	Nessus	SuSE Local Security Checks	medium
212563	SUSE SLES15 / openSUSE 15 Security Update : python39 (SUSE-SU-2024:4135-1)	Nessus	SuSE Local Security Checks	medium
212553	SUSE SLES12 Security Update : python36 (SUSE-SU-2024:4169-1)	Nessus	SuSE Local Security Checks	medium
212282	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python3 (SUSE-SU-2024:4193-1)	Nessus	SuSE Local Security Checks	medium
212103	AlmaLinux 8 : python3:3.6.8 (ALSA-2024:10779)	Nessus	Alma Linux Local Security Checks	medium
212075	Oracle Linux 8 : python3:3.6.8 (ELSA-2024-10779)	Nessus	Oracle Linux Local Security Checks	medium
212057	RHEL 8 : python3:3.6.8 (RHSA-2024:10779)	Nessus	Red Hat Local Security Checks	medium
212013	CBL Mariner 2.0 Security Update: python3 (CVE-2024-11168)	Nessus	MarinerOS Local Security Checks	medium
211991	Debian dla-3980 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	critical
211741	Fedora 41 : python3.6 (2024-da1b7e1cc5)	Nessus	Fedora Local Security Checks	medium
211739	Fedora 40 : python3.6 (2024-c16972785b)	Nessus	Fedora Local Security Checks	medium
211470	Python Improper Validation SSRF (CVE-2024-11168)	Nessus	Windows	low

Detections

Analytics

CVE-2024-11168

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

low