Lucene search
+L

841 matches found

Fedora
Fedora
added 2025/04/20 4:23 a.m.20 views

[SECURITY] Fedora 42 Update: rust-idna-1.0.3-1.fc42

IDNA Internationalizing Domain Names in Applications and Punycode...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2025/04/20 4:23 a.m.14 views

[SECURITY] Fedora 42 Update: rust-idna_adapter-1.2.0-1.fc42

Back end adapter for idna...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2024-3651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function'...

7.5CVSS6.5AI score0.01386EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2016-8625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue...

7.5CVSS6.8AI score0.04321EPSS
SaveExploits0References3
Rosalinux
Rosalinux
added 2025/03/01 9:32 p.m.14 views

Advisory ROSA-SA-2025-2744

Software: python-idna 2.5 OS: ROSA Virtualization 3.0 packageevrstring: python-idna-2.5-7.0.2.rv30 CVE-ID: CVE-2024-3651 BDU-ID: 2024-04211 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the idna.encode function of the Internationalized Domain Names in Applications IDNA is associated with...

7.5CVSS7.4AI score0.01386EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.7 views

Astra Linux – Vulnerability in python-idna

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function’s handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

7.5CVSS6.6AI score0.01386EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.9 views

Azure Linux 3.0 Security Update: python-idna / python-pip / python3 / tensorflow (CVE-2024-3651)

The version of python-idna / python-pip / python3 / tensorflow installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3651 advisory. - A vulnerability was identified in the kjd/idna library, specifically...

7.5CVSS6.7AI score0.01386EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
added 2025/02/03 9:00 a.m.13 views

Security update for SUSE Manager Client Tools and Salt Bundle

This update for SUSE Manager Client Tools and Salt Bundle the following issues: uyuni-tools: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent...

7.5CVSS7.8AI score0.02284EPSS
SaveExploits4References62
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:08 p.m.27 views

Security Bulletin: Vulnerability in idna  ( CVE-2024-3651) may affect IBM watsonx Assistant for IBM Cloud Pak for Data

Summary A potential denial of service vulnerability CVE-2024-3651 has been identified related to idna that may affect IBM watsonx Assistant for IBM Cloud Pak for Data. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-3651...

7.5CVSS6.2AI score0.01386EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:08 p.m.24 views

Security Bulletin: IBM Maximo Application Suite: idna-2.8-py2.py3-none-any.whl is vulnerable to CVE-2024-3651 used in IBM Maximo Application Suite - Edge Data Collector

Summary IBM Maximo Application Suite - Edge Data Collector uses idna-2.8-py2.py3-none-any.whl which is vulnerable to CVE-2024-3651 Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna could allow a local user to cause a denial of service using a specially crafted argument to the idna.encod...

7.5CVSS6.4AI score0.01386EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:08 p.m.18 views

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses idna-3.6-py3-none-any.whl which is vulnerable to this CVE-2024-3651

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses idna-3.6-py3-none-any.whl which is vulnerable to this CVE-2024-3651 Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna could allow a local user to cause a denial of service using a specially crafte...

7.5CVSS6.6AI score0.01386EPSS
SaveExploits1Affected Software1
Photon
Photon
added 2025/01/28 12:00 a.m.12 views

Important Photon OS Security Update - PHSA-2025-5.0-91-0462

Updates of 'python3-idna', 'python-idna', 'frr' packages of Photon OS have been released...

7.5CVSS6.7AI score0.01386EPSS
SaveExploits1
Photon
Photon
added 2025/01/28 12:00 a.m.16 views

Important Photon OS Security Update - PHSA-2025-5.0-0462

Updates of 'frr', 'python-idna', 'python3-idna' packages of Photon OS have been released...

7.5CVSS6.7AI score0.01386EPSS
SaveExploits1
OSV
OSV
added 2025/01/17 3:08 p.m.25 views

BIT-PYTHON-MIN-2022-45061

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

7.5CVSS7.8AI score0.02523EPSS
SaveExploits1References38
Tenable Nessus
Tenable Nessus
added 2024/12/11 12:00 a.m.7 views

GLSA-202412-17 : idna: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202412-17 idna: Denial of Service A vulnerability has been discovered in idna. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

7.5CVSS6.7AI score0.01386EPSS
SaveExploits1References3
Gentoo Linux
Gentoo Linux
added 2024/12/11 12:00 a.m.19 views

idna: Denial of Service

Background Internationalized Domain Names for Python IDNA 2008 and UTS 46 Description A vulnerability has been discovered in idna. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier for details. Workaround There is no known workaround...

7.5CVSS6.9AI score0.01386EPSS
SaveExploits1
OSV
OSV
added 2024/12/09 8:41 p.m.21 views

GHSA-H97M-WW89-6JMQ `idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

6.3CVSS4.9AI score0.00213EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2024/12/09 8:41 p.m.29 views

`idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS4.2AI score0.00213EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/12/09 12:00 p.m.25 views

RUSTSEC-2024-0421 `idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS6.1AI score0.00213EPSS
SaveExploits1References3
Rosalinux
Rosalinux
added 2024/11/26 9:44 a.m.25 views

Advisory ROSA-SA-2024-2531

Software: python-idna 2.4 OS: rosa-server79 packageevrstring: python-idna-2.4-1.0.1.res7 CVE-ID: CVE-2024-3651 BDU-ID: 2024-04211 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the idna.encode function of the Internationalized Domain of Names in Applications IDNA is associated with uncontrolled...

7.5CVSS7AI score0.01386EPSS
SaveExploits1
Rows per page
Query Builder