Lucene search
GoogleOSV:CVE-2023-41105HistoryAug 23, 2023 - 7:15 a.m.
CVE-2023-41105
2023-08-2307:15:08
Google
osv.dev
8
python
path truncation
security issue
An issue was discovered in Python 3.11 through 3.11.4. If a path containing ‘\0’ bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first ‘\0’ byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
References
Related
nessus
nessus
Ubuntu 23.04 : Python vulnerability (USN-6547-1)
2023-12-11 00:00:00
Python Untrusted Search Path (CVE-2023-41105)
2023-09-07 00:00:00
RHEL 8 : python3.11 (RHSA-2023:7024)
2023-11-14 00:00:00
osv
osv
os.path.normpath() truncates on null bytes
2023-08-24 00:00:00
BIT-python-2023-41105
2024-03-06 11:03:03
Moderate: python3.11 security update
2023-11-14 00:00:00
f5
f5
K000138953 : Python vulnerability CVE-2023-41105
2024-03-20 00:00:00
nvd
nvd
CVE-2023-41105
2023-08-23 07:15:08
ubuntucve
ubuntucve
CVE-2023-41105
2023-08-23 00:00:00
veracode
veracode
Untrusted Search Path
2023-10-04 09:47:04
openvas
openvas
Python 3.11.x < 3.11.5, 3.12.0a1 < 3.12.0rc2 Security Bypass Vulnerability - Mac OS X
2023-09-04 00:00:00
Python 3.11.x < 3.11.5, 3.12.0a1 < 3.12.0rc2 Security Bypass Vulnerability - Windows
2023-09-04 00:00:00
Ubuntu: Security Advisory (USN-6547-1)
2023-12-12 00:00:00
githubexploit
githubexploit
Exploit for Untrusted Search Path in Python
2023-10-05 00:32:31
Exploit for Untrusted Search Path in Python
2023-10-05 00:32:31
ubuntu
ubuntu
Python vulnerability
2023-12-11 00:00:00
prion
prion
Design/Logic Flaw
2023-08-23 07:15:00
debiancve
debiancve
CVE-2023-41105
2023-08-23 07:15:08
cvelist
cvelist
CVE-2023-41105
2023-08-23 00:00:00
redhatcve
redhatcve
CVE-2023-41105
2023-08-30 21:12:12
cve
cve
CVE-2023-41105
2023-08-23 07:15:08
redhat
redhat
(RHSA-2023:6494) Moderate: python3.11 security update
2023-11-07 06:06:58
(RHSA-2023:7024) Moderate: python3.11 security update
2023-11-14 08:43:16
oraclelinux
oraclelinux
python3.11 security update
2023-11-17 00:00:00
python3.11 security update
2023-11-11 00:00:00
almalinux
almalinux
Moderate: python3.11 security update
2023-11-07 00:00:00
Moderate: python3.11 security update
2023-11-14 00:00:00
jvn
jvn
JVN#41113329: Pyramid vulnerable to directory traversal
2023-09-11 00:00:00
ibm
ibm
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2024-05-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0093
2023-09-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00