The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7785 advisory.

    gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level     synchronous API on top of libevent event loop.  Features include:    * convenient API around greenlets   *     familiar synchronization primitives (gevent.event, gevent.queue)   * socket module that cooperates   *     WSGI server on top of libevent-http   * DNS requests done through libevent-dns   * monkey patching utility     to get pure Python modules to cooperate

    Security Fix(es):

    * python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : python-gevent (RHSA-2024:7785)

critical Nessus Plugin ID 208255

Version 1.1