939 matches found
SUSE-SU-2024:1428-1 Security update for python-idna
This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode bsc1222842...
[SECURITY] Fedora 38 Update: mingw-python-idna-3.7-1.fc38
MinGW Windows Python idna...
[SECURITY] Fedora 39 Update: mingw-python-idna-3.7-1.fc39
MinGW Windows Python idna...
[SECURITY] Fedora 40 Update: mingw-python-idna-3.7-1.fc40
MinGW Windows Python idna...
UBUNTU-CVE-2024-3651
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
Fedora 38 : mingw-python-idna (2024-831b7c8340)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-831b7c8340 advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
Fedora 39 : mingw-python-idna (2024-83ef5f3c4f)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-83ef5f3c4f advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
SUSE CVE-2024-3651
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
Denial Of Service (DoS)
idna is vulnerable to Denial Of Service. The vulnerability is due to a specially crafted argument to the idna.encode function, which could consume significant resources...
GHSA-JJG7-2V4V-X38H vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-jupyter-web-app, py3-cassandra-medusa, confluent-docker-utils, py3-pipenv, checkov, dask-gateway, kubeflow-pipelines-visualization-server, jwt-tool, ggshield, kubeflow-pipelines, kubeflow-volumes-web-app, py3-idna, k8s-sidecar, kubeflow-katib, az...
GHSA-JJG7-2V4V-X38H Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...
Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
Impact A specially crafted argument to the idna.encode function could consume significant resources. This may lead to a denial-of-service. Patches The function has been refined to reject such strings without the associated resource consumption in version 3.7. Workarounds Domain names cannot excee...
PT-2024-3833
Name of the Vulnerable Software and Affected Versions python-idna version 3.6 Description The issue arises from the idna.encode function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This is triggered by a crafted inpu...
Updated python python3 packages fix security vulnerabilities
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...
python: CPU denial of service via inefficient IDNA decoder
A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA RFC 3490 decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be...
PT-2024-17492
Name of the Vulnerable Software and Affected Versions idna versions 0.5.0 and earlier url versions prior to 2.5.4 Description The issue is related to improper validation of unsafe equivalence in punycode by the idna crate from Servo rust-url. This allows an attacker to create a punycode hostname...
python: CPU denial of service via inefficient IDNA decoder
A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA RFC 3490 decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be...
Fedora 39 : pypy (2023-5460cf6dfb)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5460cf6dfb advisory. Security fix for CVE-2022-45061 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
python39:3.9 and python39-devel:3.9 security update
Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 modwsgi 4.7.1-5 - Core dumped upon file upload = 1GB Resolves: rhbz2125172 numpy 1.19.4-3 - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz1933055 pybind11 2.7.1-1 - Update...