Lucene search
RedHatRHSA-2024:4865HistoryJul 25, 2024 - 10:12 a.m.
(RHSA-2024:4865) Moderate: Red Hat Service Interconnect security update
2024-07-2510:12:00
access.redhat.com
2
red hat service interconnect
security update
moderate
vulnerabilities
python
skupper
zipfile module
denial of service
cve-2023-6597
cve-2024-0450
cve-2024-6535
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
20.9%
Security Fix(es):
-
python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
-
python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
-
skupper: potential authentication bypass to skupper console via forged cookies (CVE-2024-6535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
(RHSA-2024:4871) Moderate: Red Hat Service Interconnect security update
2024-07-25 13:48:54
(RHSA-2024:4078) Important: python3.9 security update
2024-06-25 04:51:05
(RHSA-2024:3347) Important: python3 security update
2024-05-23 14:21:45
mageia
mageia
Updated python3, python packages fix security vulnerabilities
2024-03-28 06:52:55
osv
osv
Important: python3 security update
2024-06-14 13:59:16
Important: python3.9 security update
2024-07-02 14:11:27
Important: python3.9 security update
2024-06-25 00:00:00
nessus
nessus
CentOS 8 : python3 (CESA-2024:3347)
2024-05-23 00:00:00
EulerOS Virtualization 2.11.0 : python3 (EulerOS-SA-2024-2198)
2024-08-20 00:00:00
EulerOS 2.0 SP11 : python3 (EulerOS-SA-2024-1822)
2024-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: python3.6-3.6.15-28.fc39
2024-06-01 01:12:49
[SECURITY] Fedora 40 Update: python3.6-3.6.15-30.fc40
2024-05-31 01:17:14
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0096)
2024-04-05 00:00:00
Fedora: Security Advisory (FEDORA-2024-18b9c9b9cf)
2024-06-07 00:00:00
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2024-2198)
2024-08-20 00:00:00
rocky
rocky
python3.9 security update
2024-07-02 14:11:27
python3 security update
2024-06-14 13:59:16
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
oraclelinux
oraclelinux
python3.9 security update
2024-06-25 00:00:00
python3.11 security update
2024-06-24 00:00:00
python3 security update
2024-05-29 00:00:00
almalinux
almalinux
Important: python3 security update
2024-05-23 00:00:00
Important: python3.9 security update
2024-06-25 00:00:00
Important: python3.11 security update
2024-06-24 00:00:00
debian
debian
[SECURITY] [DLA 3772-1] python3.7 security update
2024-03-24 21:51:46
[SECURITY] [DLA 3771-1] python2.7 security update
2024-03-24 21:44:29
slackware
slackware
[slackware-security] python3
2024-03-20 21:14:26
veracode
veracode
Authentication Bypass
2024-07-19 08:48:32
Improper Authorization
2024-03-26 21:20:32
Asymmetric Resource Consumption
2024-03-26 20:39:01
redhatcve
redhatcve
nvd
nvd
vulnrichment
vulnrichment
CVE-2024-6535 Skupper: potential authentication bypass to skupper console via forged cookies
2024-07-17 02:25:25
CVE-2023-6597
2024-03-19 15:44:28
CVE-2024-0450 Quoted zip-bomb protection for zipfile
2024-03-19 15:12:07
cve
cve
cgr
cgr
CVE-2023-6597 vulnerabilities
2024-05-19 03:07:16
CVE-2024-0450 vulnerabilities
2024-05-19 03:07:16
amazon
amazon
Important: python3
2024-05-09 19:16:00
Important: python38
2024-05-09 17:43:00
Medium: python3
2024-04-11 01:07:00
cvelist
cvelist
CVE-2024-6535 Skupper: potential authentication bypass to skupper console via forged cookies
2024-07-17 02:25:25
CVE-2023-6597
2024-03-19 15:44:28
CVE-2024-0450 Quoted zip-bomb protection for zipfile
2024-03-19 15:12:07
github
github
Skupper uses a static cookie secret for the openshift oauth-proxy
2024-07-17 03:31:38
ibm
ibm
Security Bulletin: Vulnerability in Python affects watsonx.data
2024-09-05 17:56:06
wolfi
wolfi
CVE-2023-6597 vulnerabilities
2024-09-18 21:11:55
CVE-2024-0450 vulnerabilities
2024-09-18 21:11:55
ubuntucve
ubuntucve
CVE-2023-6597
2024-03-19 00:00:00
CVE-2024-0450
2024-03-19 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-6597 affecting package python3 for versions less than 3.9.19-1
2024-03-29 17:23:41
CVE-2023-6597 affecting package python3 for versions less than 3.12.3-1
2024-08-25 15:13:42
CVE-2024-0450 affecting package python3 for versions less than 3.9.19-1
2024-03-29 17:23:41
redos
redos
ROS-20240709-02
2024-07-09 00:00:00
ROS-20240820-03
2024-08-20 00:00:00
alpinelinux
alpinelinux
CVE-2023-6597
2024-03-19 16:15:08
CVE-2024-0450
2024-03-19 16:15:09
debiancve
debiancve
CVE-2023-6597
2024-03-19 16:15:08
CVE-2024-0450
2024-03-19 16:15:09
aix
aix
AIX is affected by a denial of service due to Python (CVE-2024-0450)
2024-06-24 15:07:51
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2024-05-04 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
20.9%
Related for RHSA-2024:4865