Fedora 37 : python2.7 (2023-a990c93ed0)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a990c93ed0 advisory. Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder Tenable has extracted the preceding description block directly from the...

SUSE-SU-2024:1439-2 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

SUSE-SU-2024:1439-1 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

SUSE SLES12 Security Update : python-idna (SUSE-SU-2024:1428-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1428-1 advisory. - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842. Tenable has extracted...

SUSE-SU-2024:1428-1 Security update for python-idna

This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...

[SECURITY] Fedora 38 Update: mingw-python-idna-3.7-1.fc38

MinGW Windows Python idna...

[SECURITY] Fedora 39 Update: mingw-python-idna-3.7-1.fc39

MinGW Windows Python idna...

[SECURITY] Fedora 40 Update: mingw-python-idna-3.7-1.fc40

MinGW Windows Python idna...

Fedora 39 : mingw-python-idna (2024-83ef5f3c4f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-83ef5f3c4f advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

UBUNTU-CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

Fedora 38 : mingw-python-idna (2024-831b7c8340)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-831b7c8340 advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

SUSE CVE-2024-3651

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...

Denial Of Service (DoS)

idna is vulnerable to Denial Of Service. The vulnerability is due to a specially crafted argument to the idna.encode function, which could consume significant resources...

Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: ggshield, py3-idna, kubeflow-katib, py3-pipenv, kubeflow-jupyter-web-app, checkov, kubeflow-pipelines, kserve, jwt-tool, dask-gateway, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, confluent-docker-utils, k8s-sidecar, az, py3-cassandra-medusa...

GHSA-JJG7-2V4V-X38H Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode

Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...

PT-2024-3833

Name of the Vulnerable Software and Affected Versions python-idna version 3.6 Description The issue arises from the idna.encode function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This is triggered by a crafted inpu...

Updated python python3 packages fix security vulnerabilities

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

python: CPU denial of service via inefficient IDNA decoder

A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA RFC 3490 decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be...

PT-2024-17492

Name of the Vulnerable Software and Affected Versions idna versions 0.5.0 and earlier url versions prior to 2.5.4 Description The issue is related to improper validation of unsafe equivalence in punycode by the idna crate from Servo rust-url. This allows an attacker to create a punycode hostname...