Lucene search

RedHatRHSA-2024:7417

HistoryOct 01, 2024 - 12:02 a.m.

(RHSA-2024:7417) Low: python3 security update

2024-10-0100:02:43

CWE-440

access.redhat.com

python programming language

security update

ipv4

ipv6

dynamic typing

cve-2024-4032

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

Low

JSON

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected configurations

Vulners

Node

redhatpython39Range≤3.9-8100020240826142629.d47b87a4

redhatkdelibs_develRange≤3.9-8100020240826142629.d47b87a4

redhatpython3.12Range≤3.12.5-2.el8_10

redhatpython3.11Range≤3.11.9-7.el8_10

redhatpython3Range≤3.6.8-67.el8_10

redhatpython3-0Range≤3.6.8-47.el8_6.7

redhatpython3-0Range≤3.6.8-51.el8_8.7

redhatpython3.11Range≤3.11.7-1.el9_4.3

redhatpython3.9Range≤3.9.18-3.el9_4.3

redhatpython3.12Range≤3.12.5-2.el9

AND

redhatenterprise_linuxMatch8

redhatenterprise_linuxMatch9

VendorProductVersionCPE
redhatpython39*cpe:2.3:a:redhat:python39:*:*:*:*:*:*:*:*
redhatkdelibs_devel*cpe:2.3:a:redhat:kdelibs_devel:*:*:*:*:*:*:*:*
redhatpython3.12*cpe:2.3:a:redhat:python3.12:*:*:*:*:*:*:*:*
redhatpython3.11*cpe:2.3:a:redhat:python3.11:*:*:*:*:*:*:*:*
redhatpython3*cpe:2.3:a:redhat:python3:*:*:*:*:*:*:*:*
redhatpython3-0*cpe:2.3:a:redhat:python3-0:*:*:*:*:*:*:*:*
redhatpython3.9*cpe:2.3:a:redhat:python3.9:*:*:*:*:*:*:*:*
redhatenterprise_linux8cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*
redhatenterprise_linux9cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	python39	*	cpe:2.3:a:redhat:python39::::::::
redhat	kdelibs_devel	*	cpe:2.3:a:redhat:kdelibs_devel::::::::
redhat	python3.12	*	cpe:2.3:a:redhat:python3.12::::::::
redhat	python3.11	*	cpe:2.3:a:redhat:python3.11::::::::
redhat	python3	*	cpe:2.3:a:redhat:python3::::::::
redhat	python3-0	*	cpe:2.3:a:redhat:python3-0::::::::
redhat	python3.9	*	cpe:2.3:a:redhat:python3.9::::::::
redhat	enterprise_linux	8	cpe:2.3:o:redhat:enterprise_linux:8:::::::*
redhat	enterprise_linux	9	cpe:2.3:o:redhat:enterprise_linux:9:::::::*