The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4058 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4058 advisory.

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior.The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some     circumstances.(CVE-2023-6597)

    An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior.The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive.(CVE-2024-0450)

Tenable has extracted the preceding description block directly from the EulerOS python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4078 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4078 advisory.

    * python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

    * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0450 advisory.

  - An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior. The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior.The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some     circumstances.(CVE-2023-6597)

    An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior.The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive.(CVE-2024-0450)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3948 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3948-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     November 07, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : pypy3     Version        : 7.3.5+dfsg-2+deb11u3     CVE ID         : CVE-2023-6597 CVE-2023-24329 CVE-2023-40217 CVE-2024-0450     Debian Bug     :

    Brief introduction

    CVE-2023-6597

        An issue was found in the CPython `tempfile.TemporaryDirectory` class         affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and         prior. The tempfile.TemporaryDirectory class would dereference         symlinks during cleanup of permissions-related errors. This means         users which can run privileged programs are potentially able to modify         permissions of files referenced by symlinks in some circumstances.

    CVE-2023-24329

        An issue in the urllib.parse component of Python before 3.11.4 allows         attackers to bypass blocklisting methods by supplying a URL that starts         with blank characters.

    CVE-2023-40217

        An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18,         3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects         servers (such as HTTP servers) that use TLS client authentication. If         a TLS server-side socket is created, receives data into the socket         buffer, and then is closed quickly, there is a brief window where         the SSLSocket instance will detect the socket as not connected and         won't initiate a handshake, but buffered data will still be readable         from the socket buffer. This data will not be authenticated if the         server-side TLS peer is expecting client certificate authentication,         and is indistinguishable from valid TLS stream data. Data is limited         in size to the amount that will fit in the buffer. (The TLS connection         cannot directly be used for data exfiltration because the vulnerable         code path requires that the connection be closed on initialization         of the SSLSocket.)

    CVE-2024-0450

        An issue was found in the CPython `zipfile` module affecting versions         3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile         module is vulnerable to quoted-overlap zip-bombs which exploit         the zip format to create a zip-bomb with a high compression ratio. The         fixed versions of CPython makes the zipfile module reject zip archives         which overlap entries in the archive.

    For Debian 11 bullseye, these problems have been fixed in version     7.3.5+dfsg-2+deb11u3.

    We recommend that you upgrade your pypy3 packages.

    For the detailed security status of pypy3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/pypy3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-605 advisory.

    An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and     3.8.18 and prior.

    The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip format to create a     zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip     archives which overlap entries in the archive. (CVE-2024-0450)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a702b78744 advisory.

    Security fix for CVE-2024-0450 and CVE-2023-6597

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9192 advisory.

    - Security fix for CVE-2024-8088     Resolves: RHEL-55959
    - Security fix for CVE-2024-6923     Resolves: RHEL-53038
    - Security fix for CVE-2024-4032     Resolves: RHEL-44099
    - Security fixes for CVE-2023-6597 and CVE-2024-0450

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.102001 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login     process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. (CVE-2024-22365)

  - An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some circumstances.
    (CVE-2023-6597)

  - An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior. The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

  - The DNS message parsing code in `named` includes a section whose computational complexity is overly high.
    It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive     CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative     servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through     9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1     through 9.18.21-S1. (CVE-2023-4408)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3980 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3980-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     December 02, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u2     CVE ID         : CVE-2015-20107 CVE-2020-10735 CVE-2021-3426 CVE-2021-3733                      CVE-2021-3737 CVE-2021-4189 CVE-2021-28861 CVE-2021-29921                      CVE-2022-42919 CVE-2022-45061 CVE-2023-6597 CVE-2023-24329                      CVE-2023-27043 CVE-2023-40217 CVE-2024-0397 CVE-2024-0450                      CVE-2024-4032 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592                      CVE-2024-8088 CVE-2024-9287 CVE-2024-11168     Debian Bug     : 989195 1070135 1059298 1070133

    Multiple vulnerabilities have been fixed in the Python3 interpreter.

    CVE-2015-20107

        The mailcap module did not add escape characters into commands         discovered in the system mailcap file

    CVE-2020-10735

        Prevent DoS with very large int

    CVE-2021-3426

        Remove the pydoc getfile feature which could be abused to read         arbitrary files on the disk

    CVE-2021-3733

        Regular Expression Denial of Service in urllib's         AbstractBasicAuthHandler class

    CVE-2021-3737

        Infinite loop in the HTTP client code

    CVE-2021-4189

        Make ftplib not trust the PASV response

    CVE-2021-28861

        Open redirection vulnerability in http.server

    CVE-2021-29921

        Leading zeros in IPv4 addresses are no longer tolerated

    CVE-2022-42919

        Don't use Linux abstract sockets for multiprocessing

    CVE-2022-45061

        Quadratic time in the IDNA decoder

    CVE-2023-6597

        tempfile.TemporaryDirectory failure to remove dir

    CVE-2023-24329

        Strip C0 control and space chars in urlsplit

    CVE-2023-27043

        Reject malformed addresses in email.parseaddr()

    CVE-2023-40217

        ssl.SSLSocket bypass of the TLS handshake

    CVE-2024-0397

        Race condition in ssl.SSLContext

    CVE-2024-0450

        Quoted-overlap zipbomb DoS

    CVE-2024-4032

        Incorrect information about private addresses in the ipaddress         module

    CVE-2024-6232

        ReDoS when parsing tarfile headers

    CVE-2024-6923

        Encode newlines in headers in the email module

    CVE-2024-7592

        Quadratic complexity parsing cookies with backslashes

    CVE-2024-8088

        Infinite loop when iterating over zip archive entry names

    CVE-2024-9287

        venv activation scripts did't quote paths

    CVE-2024-11168

        urllib functions improperly validated bracketed hosts

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u2.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
200880	RHEL 8 : python3.11 (RHSA-2024:4058)	Nessus	Red Hat Local Security Checks	6/24/2024	3/19/2025	high
200881	AlmaLinux 8 : python3.11 (ALSA-2024:4058)	Nessus	Alma Linux Local Security Checks	6/24/2024	6/24/2024	high
200950	EulerOS 2.0 SP11 : python3 (EulerOS-SA-2024-1822)	Nessus	Huawei Local Security Checks	6/25/2024	6/25/2024	high
200982	RHEL 9 : python3.9 (RHSA-2024:4078)	Nessus	Red Hat Local Security Checks	6/25/2024	3/19/2025	high
201248	Rocky Linux 9 : python3.9 (RLSA-2024:4078)	Nessus	Rocky Linux Local Security Checks	7/2/2024	7/2/2024	high
201794	CBL Mariner 2.0 Security Update: python3 (CVE-2024-0450)	Nessus	MarinerOS Local Security Checks	7/3/2024	2/10/2025	medium
205908	EulerOS Virtualization 2.11.0 : python3 (EulerOS-SA-2024-2198)	Nessus	Huawei Local Security Checks	8/20/2024	8/20/2024	high
210518	Debian dla-3948 : pypy3 - security update	Nessus	Debian Local Security Checks	11/7/2024	11/7/2024	critical
194493	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2024-605)	Nessus	Amazon Linux Local Security Checks	4/29/2024	12/11/2024	medium
198243	Fedora 40 : python3.6 (2024-a702b78744)	Nessus	Fedora Local Security Checks	5/31/2024	5/31/2024	high
211556	Oracle Linux 9 : python3.11 (ELSA-2024-9192)	Nessus	Oracle Linux Local Security Checks	11/19/2024	11/19/2024	high
208276	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.102001)	Nessus	Misc.	10/8/2024	2/20/2025	medium
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	9/9/2024	2/19/2025	medium
211991	Debian dla-3980 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	12/2/2024	12/2/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

medium

high

critical

medium

high

high

medium

medium

critical