The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4078 advisory.

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-616 advisory.

  - An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some circumstances.
    (CVE-2023-6597)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0782-2 advisory.

  - xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters     into namespace URIs. (CVE-2022-25236)

  - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special     character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some     applications, an attacker can bypass a protection mechanism in which application access is granted only     after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be     used for signup). This occurs in email/_parseaddr.py in recent versions of Python. (CVE-2023-27043)

  - An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some circumstances.
    (CVE-2023-6597)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3948 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3948-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     November 07, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : pypy3     Version        : 7.3.5+dfsg-2+deb11u3     CVE ID         : CVE-2023-6597 CVE-2023-24329 CVE-2023-40217 CVE-2024-0450     Debian Bug     :

    Brief introduction

    CVE-2023-6597

        An issue was found in the CPython `tempfile.TemporaryDirectory` class         affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and         prior. The tempfile.TemporaryDirectory class would dereference         symlinks during cleanup of permissions-related errors. This means         users which can run privileged programs are potentially able to modify         permissions of files referenced by symlinks in some circumstances.

    CVE-2023-24329

        An issue in the urllib.parse component of Python before 3.11.4 allows         attackers to bypass blocklisting methods by supplying a URL that starts         with blank characters.

    CVE-2023-40217

        An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18,         3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects         servers (such as HTTP servers) that use TLS client authentication. If         a TLS server-side socket is created, receives data into the socket         buffer, and then is closed quickly, there is a brief window where         the SSLSocket instance will detect the socket as not connected and         won't initiate a handshake, but buffered data will still be readable         from the socket buffer. This data will not be authenticated if the         server-side TLS peer is expecting client certificate authentication,         and is indistinguishable from valid TLS stream data. Data is limited         in size to the amount that will fit in the buffer. (The TLS connection         cannot directly be used for data exfiltration because the vulnerable         code path requires that the connection be closed on initialization         of the SSLSocket.)

    CVE-2024-0450

        An issue was found in the CPython `zipfile` module affecting versions         3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile         module is vulnerable to quoted-overlap zip-bombs which exploit         the zip format to create a zip-bomb with a high compression ratio. The         fixed versions of CPython makes the zipfile module reject zip archives         which overlap entries in the archive.

    For Debian 11 bullseye, these problems have been fixed in version     7.3.5+dfsg-2+deb11u3.

    We recommend that you upgrade your pypy3 packages.

    For the detailed security status of pypy3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/pypy3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4058 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4077 advisory.

    - Security fix for CVE-2023-6597

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4078 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0784-1 advisory.

  - xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters     into namespace URIs. (CVE-2022-25236)

  - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special     character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some     applications, an attacker can bypass a protection mechanism in which application access is granted only     after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be     used for signup). This occurs in email/_parseaddr.py in recent versions of Python. (CVE-2023-27043)

  - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x     before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If     a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,     there is a brief window where the SSLSocket instance will detect the socket as not connected and won't     initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not     be authenticated if the server-side TLS peer is expecting client certificate authentication, and is     indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the     buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path     requires that the connection be closed on initialization of the SSLSocket.) (CVE-2023-40217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4896 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3466 advisory.

    - Security fixes for CVE-2023-6597 and CVE-2024-0450

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1556-1 advisory.

  - libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are     required in the case of a large token for which multiple buffer fills are needed. (CVE-2023-52425)

  - An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some circumstances.
    (CVE-2023-6597)

  - An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior. The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a702b78744 advisory.

    Security fix for CVE-2024-0450 and CVE-2023-6597

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
201248	Rocky Linux 9 : python3.9 (RLSA-2024:4078)	Nessus	Rocky Linux Local Security Checks	7/2/2024	7/2/2024	high
196915	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2024-616)	Nessus	Amazon Linux Local Security Checks	5/13/2024	5/13/2024	high
194885	SUSE SLES15 Security Update : python311 (SUSE-SU-2024:0782-2)	Nessus	SuSE Local Security Checks	5/1/2024	11/15/2024	critical
210518	Debian dla-3948 : pypy3 - security update	Nessus	Debian Local Security Checks	11/7/2024	11/7/2024	critical
200880	RHEL 8 : python3.11 (RHSA-2024:4058)	Nessus	Red Hat Local Security Checks	6/24/2024	11/7/2024	high
200999	Oracle Linux 9 : python3.11 (ELSA-2024-4077)	Nessus	Oracle Linux Local Security Checks	6/25/2024	9/21/2024	high
200982	RHEL 9 : python3.9 (RHSA-2024:4078)	Nessus	Red Hat Local Security Checks	6/25/2024	11/7/2024	high
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	9/9/2024	10/21/2024	critical
191660	SUSE SLES15 / openSUSE 15 Security Update : python39 (SUSE-SU-2024:0784-1)	Nessus	SuSE Local Security Checks	3/6/2024	11/15/2024	critical
204830	RHEL 9 : python3.11 (RHSA-2024:4896)	Nessus	Red Hat Local Security Checks	7/29/2024	11/7/2024	high
198276	Oracle Linux 8 : python39:3.9 / and / python39-devel:3.9 (ELSA-2024-3466)	Nessus	Oracle Linux Local Security Checks	6/1/2024	11/2/2024	high
195191	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2024:1556-1)	Nessus	SuSE Local Security Checks	5/9/2024	5/9/2024	high
198243	Fedora 40 : python3.6 (2024-a702b78744)	Nessus	Fedora Local Security Checks	5/31/2024	5/31/2024	high

Detections

Analytics

Plugins Search

high

high

critical

critical

high

high

high

critical

critical

high

high

high

high