ROS-20230428-01

🗓️ 28 Apr 2023 00:00:00Reported by RedosType

A vulnerability in Python Charmers Future program allows remote attackers to exploit improper input validation in the Set-Cookie header, leading to denial of service attacks via regular expressions

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future (CVE-2022-40899)	31 Mar 202317:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	20 Jun 202304:41	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-future (ALAS2023-2023-173)	3 May 202300:00	–	nessus
Tenable Nessus	Dell PowerScale OneFS Multiple Vulnerabilities (DSA-2025-208)	26 Jan 202600:00	–	nessus
Tenable Nessus	RHEL 8 : RHUI 4.4.0 - Security Fixes, Bug Fixes, and Enhancements Update (Moderate) (RHSA-2023:2101)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.13.3 Async Security Update (Important) (RHSA-2023:4466)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.14 (RHSA-2023:6818)	29 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 7 : future (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 : Satellite 6.14 (RLSA-2023:6818)	11 Nov 202300:00	–	nessus
Tenable Nessus	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	2 May 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	python3-future	0.18.3-1	UNKNOWN

28 Apr 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00427

SSVC