PYSEC-2023-177

🗓️ 25 Sep 2023 12:15:00Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 8 Views

Gevent before 23.9.0 allows remote privilege escalation via crafted script to the Web Server Interface.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses gevent-21.1.2-cp37-cp37m-manylinux2010_x86_64.whl which is vulnerable to CVE-2023-41419	14 Dec 202314:08	–	ibm
IBM Security Bulletins	Security Bulletin: Gevent, used in IBM Maximo Application Suite - Monitor Component, is vulnerable to CVE-2023-41419 which allows remote attackers to escalate privileges.	12 Dec 202317:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in CloudPak for Watson AIOps. [CVE-2023-41419]	25 Oct 202320:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:19	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0161: python-gevent (ALINUX3-SA-2024:0161)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : python-gevent (ALSA-2024:8834)	6 Nov 202400:00	–	nessus
Tenable Nessus	Debian dla-4377 : python-gevent-doc - security update	9 Dec 202500:00	–	nessus
Tenable Nessus	MiracleLinux 8 : python-gevent-1.2.2-5.el8_10 (AXSA:2024-8990:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 8 : python-gevent (ELSA-2024-8834)	5 Nov 202400:00	–	nessus

Vulners

Node

gevent geventRange0–23.9.0

Source	Link
github	www.github.com/gevent/gevent/issues/1989
github	www.github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
github	www.github.com/advisories/GHSA-x7m3-jprg-wc5g

25 Sep 2023 14:28Current

7.7High risk

Vulners AI Score7.7

CVSS 3.19.8

EPSS0.01334