The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8447 advisory.

    Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed     with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem     of third-party libraries.  The python3.12 package provides the python3.12 executable: the reference     interpreter for the Python language, version 3. The majority of its standard library is provided in the     python3.12-libs package, which should be installed automatically along with python3.12. The remaining     parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test     packages, which may need to be installed separately.  Documentation for Python is provided in the     python3.12-docs package.  Packages containing additional libraries for Python are generally named with the     python3.12- prefix.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : python3.12 (RHSA-2024:8447)

high Nessus Plugin ID 209636

Version 1.2

Version 1.1

Version 1.2 Nov 8, 2024, 5:19 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202411080519
Version 1.1 Oct 25, 2024, 2:35 AM New Plugin Feed: 202410250235