Fedora 40 : python-idna (2024-098b5d9719)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-098b5d9719 advisory. Update to 3.7 rhbz2274439, security fix for CVE-2024-3651 Tenable has extracted the preceding description block directly from the Fedora security advisory...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-idna (SUSE-SU-2024:1439-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1439-1 advisory. - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode...

Fedora 37 : pypy3.9 (2023-af5206f71d)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-af5206f71d advisory. Update to 7.3.11. See https://doc.pypy.org/en/latest/release-v7.3.11.html Security fix for CVE-2022-37454, CVE-2022-45061, CVE-2022-42919. Tenable h...

SUSE-SU-2024:1439-2 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

SUSE-SU-2024:1439-1 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

SUSE SLES12 Security Update : python-idna (SUSE-SU-2024:1428-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1428-1 advisory. - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842. Tenable has extracted...

SUSE-SU-2024:1428-1 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

[SECURITY] Fedora 38 Update: mingw-python-idna-3.7-1.fc38

MinGW Windows Python idna...

[SECURITY] Fedora 39 Update: mingw-python-idna-3.7-1.fc39

MinGW Windows Python idna...

[SECURITY] Fedora 40 Update: mingw-python-idna-3.7-1.fc40

MinGW Windows Python idna...

UBUNTU-CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

Fedora 38 : mingw-python-idna (2024-831b7c8340)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-831b7c8340 advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 39 : mingw-python-idna (2024-83ef5f3c4f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-83ef5f3c4f advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

SUSE CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

Denial Of Service (DoS)

idna is vulnerable to Denial Of Service. The vulnerability is due to a specially crafted argument to the idna.encode function, which could consume significant resources...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: ggshield, checkov, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, kubeflow-pipelines, py3-idna, kserve, py3-pipenv, confluent-docker-utils, kubeflow-volumes-web-app, py3-cassandra-medusa, az, jwt-tool, dask-gateway, kubeflow-katib, k8s-sidecar...

GHSA-JJG7-2V4V-X38H Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...

Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...

PT-2024-3833

Name of the Vulnerable Software and Affected Versions python-idna version 3.6 Description The issue arises from the idna.encode function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This is triggered by a crafted inpu...

Updated python python3 packages fix security vulnerabilities

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...