Lucene search
+L

35 matches found

Tenable Nessus
Tenable Nessus
added 2024/08/06 12:00 a.m.75 views

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2024-699)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-699 advisory. A defect was discovered in the Python ssl module where there is a memoryrace condition with the ssl.SSLContext methods certstorestats andgetcacerts. The race condition can be triggered if the methods...

7.4CVSS6.7AI score0.0081EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/07/31 9:20 a.m.33 views

CVE-2024-0397

A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...

5CVSS7.2AI score0.0081EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/20 11:18 a.m.54 views

BIT-PYTHON-2024-0397 Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

7.4CVSS6.8AI score0.0081EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
added 2024/06/17 4:15 p.m.33 views

CVE-2024-0397

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

7.4CVSS6.8AI score0.0081EPSS
SaveExploits0References6
CVE
CVE
added 2024/06/17 3:09 p.m.428 views

CVE-2024-0397

CVE-2024-0397: A memory race in Python's ssl module between SSLContext.cert_store_stats() and SSLContext.get_ca_certs() can be triggered when certificates are loaded into the SSLContext concurrently with a TLS handshake. The issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5. Upgradi...

7.4CVSS7.2AI score0.0081EPSS
SaveExploits0References12
OSV
OSV
added 2024/06/17 3:09 p.m.33 views

CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

7.4CVSS6.7AI score
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2024/06/17 3:09 p.m.25 views

CVE-2024-0397 Memory race condition in ssl.SSLContext certificate store methods

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

6.5AI score0.0081EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2024/03/20 12:00 a.m.14 views

Python DoS Vulnerability (Mar 2024) - Linux

Python is prone to a denial of service DoS vulnerability in libexpat. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.6AI score0.01815EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2024/03/20 12:00 a.m.16 views

Python DoS Vulnerability (Mar 2024) - Mac OS X

Python is prone to a denial of service DoS vulnerability in libexpat. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.6AI score0.01815EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2023/10/31 12:00 a.m.60 views

Moodle 3.11.x < 3.11.9, 4.0.x < 4.0.3 CSRF Vulnerability

Moodle is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle...

8.8CVSS8.7AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/17 4:15 p.m.9 views

CVE-2022-36424

Cross-Site Request Forgery CSRF vulnerability in Nikola Loncar Easy Appointments plugin = 3.11.9 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2013/11/26 12:00 a.m.61 views

Fedora Update for kernel FEDORA-2013-21807

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.09408EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2013/11/25 12:00 a.m.36 views

Fedora 19 : kernel-3.11.9-200.fc19 (2013-21807)

The stable 3.11.9 update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

7.1CVSS6.1AI score0.03899EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/11/25 12:00 a.m.33 views

Fedora 20 : kernel-3.11.9-300.fc20 (2013-21967)

The stable 3.11.9 update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

7.1CVSS6.1AI score0.03899EPSS
SaveExploits1References3
Fedora
Fedora
added 2013/11/24 11:48 p.m.37 views

[SECURITY] Fedora 20 Update: kernel-3.11.9-300.fc20

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

7.1CVSS7.3AI score0.03899EPSS
SaveExploits1
Rows per page
Query Builder