Lucene search
+L

Linux Distros Unpatched Vulnerability : CVE-2026-19553

🗓️ 30 Sep 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 2 Views

SSLContext.wrap_bio() in Python may silently skip hostname verification.

Related
Refs
Code
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2026-19553
2 Oct 202601:46
–githubexploit
alpinelinux
AlpineLinux
CVE-2026-19553
30 Sep 202616:17
–alpinelinux
circl
Circl
CVE-2026-19553
30 Sep 202617:15
–circl
cve
CVE
CVE-2026-19553
30 Sep 202616:17
–cve
cvelist
Cvelist
CVE-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter
30 Sep 202616:17
–cvelist
debiancve
Debian CVE
CVE-2026-19553
30 Sep 202616:17
–debiancve
euvd
EUVD
EUVD-2026-90078
30 Sep 202616:17
–euvd
nvd
NVD
CVE-2026-19553
30 Sep 202617:16
–nvd
osv
OSV
ALPINE-CVE-2026-19553
30 Sep 202617:16
–osv
osv
OSV
DEBIAN-CVE-2026-19553
30 Sep 202617:16
–osv
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(353333);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/30");

  script_cve_id("CVE-2026-19553");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-19553");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if
    ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the
    server_hostname argument isn't supplied then hostname verification would be silently skipped. This defect
    could lead to programs where certificate hostname verification *appeared* to be succeeding with
    SSLContext.check_hostname = True and no ValueError being raised due to misconfiguration. If the program
    passes a server_hostname value that isn't an empty string or None to any of these APIs then certificate
    hostname verification proceeds as expected and the program is not affected by this vulnerability.
    Mitigating this vulnerability doesn't require updating Python or applying the patch. To mitigate, pass a
    valid non-None and non-empty server_hostname value to SSLContext.wrap_bio(), asyncio.create_connection(),
    or asyncio.loop.start_tls() and certificate hostname verification will proceed as expected. Upgrading to
    the latest version of Python or applying the patch only changes the behavior from silently skipping
    hostname verification to raising a ValueError, similar to SSLContext.wrap_socket(), when server_hostname
    isn't supplied. (CVE-2026-19553)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2026-19553");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-19553");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/30");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:platform-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:platform-python-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:platform-python-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-distro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-docutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-nose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-nose-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-pygments");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-pymongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-pymongo-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-sqlalchemy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-sqlalchemy-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-unversioned-command");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-virtualenv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-virtualenv-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-bson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-distro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-docutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-nose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pygments");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pymongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pymongo-gridfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-sqlalchemy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-virtualenv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-wheel-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-freethreading-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python36");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python36-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python36-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python36-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:platform-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:platform-python-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:platform-python-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-distro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-docutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-nose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-nose-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-pygments");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-pymongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-pymongo-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-sqlalchemy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-sqlalchemy-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-unversioned-command");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-virtualenv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-virtualenv-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-bson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-distro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-docs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-docutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-nose");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pygments");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pymongo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pymongo-gridfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-sqlalchemy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-virtualenv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-wheel-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-freethreading-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python36");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python36-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python36-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python36-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:tkinter");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-6", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Red Hat Enterprise Linux-10": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "10",
        "pkgs": [
          {"reference": "python-unversioned-command"},
          {"reference": "python3"},
          {"reference": "python3-debug"},
          {"reference": "python3-devel"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "python3.12"},
          {"reference": "python3.14"},
          {"reference": "python3.14-debug"},
          {"reference": "python3.14-devel"},
          {"reference": "python3.14-freethreading"},
          {"reference": "python3.14-freethreading-debug"},
          {"reference": "python3.14-freethreading-devel"},
          {"reference": "python3.14-freethreading-idle"},
          {"reference": "python3.14-freethreading-libs"},
          {"reference": "python3.14-freethreading-test"},
          {"reference": "python3.14-freethreading-tkinter"},
          {"reference": "python3.14-idle"},
          {"reference": "python3.14-libs"},
          {"reference": "python3.14-test"},
          {"reference": "python3.14-tkinter"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-6": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "6",
        "pkgs": [
          {"reference": "python"},
          {"reference": "python-devel"},
          {"reference": "python-libs"},
          {"reference": "python-test"},
          {"reference": "python-tools"},
          {"reference": "tkinter"}
        ]
      }
    ]
  },
  "CentOS Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "python"},
          {"reference": "python-debug"},
          {"reference": "python-devel"},
          {"reference": "python-libs"},
          {"reference": "python-test"},
          {"reference": "python-tools"},
          {"reference": "python3"},
          {"reference": "python3-debug"},
          {"reference": "python3-devel"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "tkinter"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "python"},
          {"reference": "python-debug"},
          {"reference": "python-devel"},
          {"reference": "python-libs"},
          {"reference": "python-test"},
          {"reference": "python-tools"},
          {"reference": "python3"},
          {"reference": "python3-debug"},
          {"reference": "python3-devel"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "tkinter"}
        ]
      }
    ]
  },
  "CentOS Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "platform-python"},
          {"reference": "platform-python-debug"},
          {"reference": "platform-python-devel"},
          {"reference": "python-PyMySQL"},
          {"reference": "python-distro"},
          {"reference": "python-docs"},
          {"reference": "python-docutils"},
          {"reference": "python-nose"},
          {"reference": "python-nose-docs"},
          {"reference": "python-pygments"},
          {"reference": "python-pymongo"},
          {"reference": "python-pymongo-doc"},
          {"reference": "python-sqlalchemy"},
          {"reference": "python-sqlalchemy-doc"},
          {"reference": "python-virtualenv"},
          {"reference": "python-virtualenv-doc"},
          {"reference": "python-wheel"},
          {"reference": "python3"},
          {"reference": "python3-PyMySQL"},
          {"reference": "python3-bson"},
          {"reference": "python3-distro"},
          {"reference": "python3-docs"},
          {"reference": "python3-docutils"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-nose"},
          {"reference": "python3-pygments"},
          {"reference": "python3-pymongo"},
          {"reference": "python3-pymongo-gridfs"},
          {"reference": "python3-scipy"},
          {"reference": "python3-sqlalchemy"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "python3-virtualenv"},
          {"reference": "python3-wheel"},
          {"reference": "python3-wheel-wheel"},
          {"reference": "python3.12"},
          {"reference": "python3.12-debug"},
          {"reference": "python3.12-devel"},
          {"reference": "python3.12-idle"},
          {"reference": "python3.12-libs"},
          {"reference": "python3.12-rpm-macros"},
          {"reference": "python3.12-test"},
          {"reference": "python3.12-tkinter"},
          {"reference": "python36"},
          {"reference": "python36-debug"},
          {"reference": "python36-devel"},
          {"reference": "python36-rpm-macros"},
          {"reference": "scipy"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "platform-python"},
          {"reference": "platform-python-debug"},
          {"reference": "platform-python-devel"},
          {"reference": "python-PyMySQL"},
          {"reference": "python-distro"},
          {"reference": "python-docs"},
          {"reference": "python-docutils"},
          {"reference": "python-nose"},
          {"reference": "python-nose-docs"},
          {"reference": "python-pygments"},
          {"reference": "python-pymongo"},
          {"reference": "python-pymongo-doc"},
          {"reference": "python-sqlalchemy"},
          {"reference": "python-sqlalchemy-doc"},
          {"reference": "python-virtualenv"},
          {"reference": "python-virtualenv-doc"},
          {"reference": "python-wheel"},
          {"reference": "python3"},
          {"reference": "python3-PyMySQL"},
          {"reference": "python3-bson"},
          {"reference": "python3-distro"},
          {"reference": "python3-docs"},
          {"reference": "python3-docutils"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-nose"},
          {"reference": "python3-pygments"},
          {"reference": "python3-pymongo"},
          {"reference": "python3-pymongo-gridfs"},
          {"reference": "python3-scipy"},
          {"reference": "python3-sqlalchemy"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "python3-virtualenv"},
          {"reference": "python3-wheel"},
          {"reference": "python3-wheel-wheel"},
          {"reference": "python3.12"},
          {"reference": "python3.12-debug"},
          {"reference": "python3.12-devel"},
          {"reference": "python3.12-idle"},
          {"reference": "python3.12-libs"},
          {"reference": "python3.12-rpm-macros"},
          {"reference": "python3.12-test"},
          {"reference": "python3.12-tkinter"},
          {"reference": "python36"},
          {"reference": "python36-debug"},
          {"reference": "python36-devel"},
          {"reference": "python36-rpm-macros"},
          {"reference": "scipy"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-9": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "9",
        "pkgs": [
          {"reference": "python-unversioned-command"},
          {"reference": "python3"},
          {"reference": "python3-debug"},
          {"reference": "python3-devel"},
          {"reference": "python3-idle"},
          {"reference": "python3-libs"},
          {"reference": "python3-test"},
          {"reference": "python3-tkinter"},
          {"reference": "python3.12"},
          {"reference": "python3.12-debug"},
          {"reference": "python3.12-devel"},
          {"reference": "python3.12-idle"},
          {"reference": "python3.12-libs"},
          {"reference": "python3.12-test"},
          {"reference": "python3.12-tkinter"},
          {"reference": "python3.14"},
          {"reference": "python3.14-debug"},
          {"reference": "python3.14-devel"},
          {"reference": "python3.14-freethreading"},
          {"reference": "python3.14-freethreading-debug"},
          {"reference": "python3.14-freethreading-devel"},
          {"reference": "python3.14-freethreading-idle"},
          {"reference": "python3.14-freethreading-libs"},
          {"reference": "python3.14-freethreading-test"},
          {"reference": "python3.14-freethreading-tkinter"},
          {"reference": "python3.14-idle"},
          {"reference": "python3.14-libs"},
          {"reference": "python3.14-test"},
          {"reference": "python3.14-tkinter"},
          {"reference": "python3.9"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
    var third_party_vendors = distro_constraints_values['third_party'];
    if (!empty_or_null(third_party_vendors)) {
        var vendor;
        foreach vendor (third_party_vendors) {
            if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
        }
    }
}

var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Sep 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 47.6
EPSS0.00472
2