Lucene search
AlmaLinuxALSA-2023:3585HistoryJun 14, 2023 - 12:00 a.m.
Important: python3.11 security update
2023-06-1400:00:00
errata.almalinux.org
7
python3.11
security update
urllib.parse
blocklisting bypass
cve-2023-24329
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
41.6%
Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.
Security Fix(es):
- python: urllib.parse url blocklisting bypass (CVE-2023-24329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | python3.11-devel | < 3.11.2-2.el9_2.1 | python3.11-devel-3.11.2-2.el9_2.1.i686.rpm |
| almalinux | 9 | i686 | python3.11-libs | < 3.11.2-2.el9_2.1 | python3.11-libs-3.11.2-2.el9_2.1.i686.rpm |
| almalinux | 9 | ppc64le | python3.11-devel | < 3.11.2-2.el9_2.1 | python3.11-devel-3.11.2-2.el9_2.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | python3.11-tkinter | < 3.11.2-2.el9_2.1 | python3.11-tkinter-3.11.2-2.el9_2.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | python3.11 | < 3.11.2-2.el9_2.1 | python3.11-3.11.2-2.el9_2.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | python3.11-libs | < 3.11.2-2.el9_2.1 | python3.11-libs-3.11.2-2.el9_2.1.ppc64le.rpm |
| almalinux | 9 | x86_64 | python3.11-tkinter | < 3.11.2-2.el9_2.1 | python3.11-tkinter-3.11.2-2.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | python3.11-devel | < 3.11.2-2.el9_2.1 | python3.11-devel-3.11.2-2.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | python3.11 | < 3.11.2-2.el9_2.1 | python3.11-3.11.2-2.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | python3.11-libs | < 3.11.2-2.el9_2.1 | python3.11-libs-3.11.2-2.el9_2.1.x86_64.rpm |
Related
debiancve
debiancve
CVE-2023-24329
2023-02-17 15:15:12
ubuntucve
ubuntucve
CVE-2023-24329
2023-02-17 00:00:00
redhatcve
redhatcve
CVE-2023-24329
2023-02-28 12:29:51
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Python vulnerability (USN-5960-1)
2023-03-16 00:00:00
Fedora 37 : mingw-python3 (2023-406c1c6ed7)
2023-03-29 00:00:00
Fedora 38 : pypy3.9 (2023-81bb8e3b99)
2023-05-31 00:00:00
amazon
amazon
Medium: python3
2023-03-17 16:34:00
cloudfoundry
cloudfoundry
USN-5960-1: Python vulnerability | Cloud Foundry
2023-04-29 00:00:00
USN-6139-1: Python vulnerability | Cloud Foundry
2023-10-05 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python2.7-2.7.18-31.fc38
2023-05-28 01:07:33
[SECURITY] Fedora 38 Update: pypy3.9-7.3.11-4.3.9.fc38
2023-05-31 17:35:04
[SECURITY] Fedora 37 Update: python3.8-3.8.16-2.fc37
2023-06-08 02:00:22
slackware
slackware
[slackware-security] python3
2023-06-09 01:28:03
redhat
redhat
(RHSA-2023:3595) Important: python3.9 security update
2023-06-14 09:04:30
(RHSA-2023:3555) Important: python security update
2023-06-09 07:32:16
rocky
rocky
python27:2.7 security update
2023-06-24 18:52:51
python3.11 security update
2023-08-31 16:54:34
python3.11 security update
2023-08-31 16:55:40
oraclelinux
oraclelinux
python27:2.7 security update
2023-07-08 00:00:00
python security update
2023-06-12 00:00:00
python3.11 security update
2023-06-17 00:00:00
cloudlinux
cloudlinux
python: Fix of CVE-2023-24329
2023-07-20 20:54:04
python: Fix of CVE-2023-24329
2023-03-06 21:09:04
centos
centos
python, tkinter security update
2023-07-27 14:34:23
python3 security update
2023-07-27 14:33:45
cert
cert
Python Parsing Error Enabling Bypass CVE-2023-24329
2023-08-11 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-24329 affecting package python3 3.7.13-5
2023-03-16 03:40:27
CVE-2023-24329 affecting package python2 2.7.18-11
2023-03-16 03:40:27
CVE-2023-24329 affecting package python3 for versions less than 3.9.14-8
2023-10-13 16:12:18
ibm
ibm
Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation and result in a remote attacker bypassing security restrictions (CVE-2023-24329).
2023-11-22 20:55:44
osv
osv
BIT-python-2023-24329
2024-03-06 11:04:03
Important: python3.9 security update
2023-08-31 16:55:39
Important: python27:2.7 security update
2023-06-24 18:52:51
openvas
openvas
Fedora: Security Advisory for pypy (FEDORA-2023-690e150a39)
2023-06-01 00:00:00
Fedora: Security Advisory for python3.8 (FEDORA-2023-d8b0003ecd)
2023-06-01 00:00:00
Fedora: Security Advisory for pypy3.9 (FEDORA-2023-401947eb94)
2023-06-09 00:00:00
cvelist
cvelist
CVE-2023-24329
2023-02-17 00:00:00
almalinux
almalinux
Important: python3 security update
2023-06-14 00:00:00
Important: python39:3.9 and python39-devel:3.9 security update
2023-06-27 00:00:00
Important: python3.9 security update
2023-06-14 00:00:00
cve
cve
CVE-2023-24329
2023-02-17 15:15:12
ubuntu
ubuntu
Python vulnerability
2023-06-05 00:00:00
Python vulnerability
2023-03-16 00:00:00
thn
thn
New Python URL Parsing Flaw Could Enable Command Execution Attacks
2023-08-12 06:03:00
aix
aix
AIX is affected by security restrictions bypass due to Python
2023-08-18 09:49:04
cgr
cgr
CVE-2023-24329 vulnerabilities
2024-05-19 03:07:16
githubexploit
githubexploit
Exploit for Improper Input Validation in Python
2023-08-17 10:33:52
Exploit for Improper Input Validation in Python
2023-10-05 01:55:05
Exploit for Improper Input Validation in Python
2023-10-05 01:55:05
f5
f5
K000135921 : Python urllib.parse vulnerability CVE-2023-24329
2023-08-22 00:00:00
veracode
veracode
URL Whitespace Padding Attack
2023-10-09 01:33:29
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
41.6%
Related for ALSA-2023:3585