Lucene search
RedHatRHSA-2023:7438HistoryNov 21, 2023 - 3:40 p.m.
(RHSA-2023:7438) Important: Red Hat OpenStack Platform 17.1.1 (python-gevent) security update
2023-11-2115:40:36
access.redhat.com
14
rhsa-2023-7438
red hat openstack
python-gevent
privilege escalation
wsgiserver
cve-2023-41419
cvss score
references
unix
gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop.
Security Fix(es):
- python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | x86_64 | python3-gevent | < 21.1.2-2.el9ost | python3-gevent-21.1.2-2.el9ost.x86_64.rpm |
| RedHat | 9 | x86_64 | python-gevent-debugsource | < 21.1.2-2.el9ost | python-gevent-debugsource-21.1.2-2.el9ost.x86_64.rpm |
| RedHat | 9 | x86_64 | python3-gevent-debuginfo | < 21.1.2-2.el9ost | python3-gevent-debuginfo-21.1.2-2.el9ost.x86_64.rpm |
Related
osv
osv
PYSEC-2023-177
2023-09-25 12:15:00
Gevent allows remote attacker to escalate privileges
2023-09-25 12:30:44
CVE-2023-41419
2023-09-25 12:15:11
ibm
ibm
Security Bulletin: Gevent, used in IBM Maximo Application Suite - Monitor Component, is vulnerable to CVE-2023-41419 which allows remote attackers to escalate privileges.
2023-12-12 17:24:15
nvd
nvd
CVE-2023-41419
2023-09-25 12:15:11
veracode
veracode
HTTP Request/Response Smuggling
2023-09-27 10:19:40
cbl_mariner
cbl_mariner
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4091-1)
2023-10-18 00:00:00
nessus
nessus
RHEL 9 : Red Hat OpenStack Platform 17.1.1 (python-gevent) (RHSA-2023:7438)
2024-04-28 00:00:00
RHEL 7 : python-gevent (Unpatched Vulnerability)
2024-06-03 00:00:00
SUSE SLED15 / SLES15 Security Update : python-gevent (SUSE-SU-2023:4091-1)
2023-10-18 00:00:00
ubuntucve
ubuntucve
CVE-2023-41419
2023-09-25 00:00:00
redhatcve
redhatcve
CVE-2023-41419
2023-09-25 18:55:01
wolfi
wolfi
CVE-2023-41419 vulnerabilities
2024-06-25 03:08:26
cvelist
cvelist
CVE-2023-41419
2023-09-25 00:00:00
cgr
cgr
CVE-2023-41419 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2023-41419
2023-09-25 12:15:11
prion
prion
Design/Logic Flaw
2023-09-25 12:15:00
github
github
Gevent allows remote attacker to escalate privileges
2023-09-25 12:30:44