Lucene search
K

665 matches found

Tenable Nessus
Tenable Nessus
added 2023/01/27 12:0 a.m.18 views

Ubuntu 16.04 ESM : wheel vulnerability (USN-5821-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5821-2 advisory. USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description blo...

7.5CVSS7AI score0.02659EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/01/27 12:0 a.m.14 views

Ubuntu: Security Advisory (USN-5821-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02659EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/01/25 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-5821-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02659EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2023/01/24 2:31 p.m.92 views

USN-5821-2: wheel vulnerability

USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this...

7.5CVSS7AI score0.02659EPSS
Exploits1
OSV
OSV
added 2023/01/24 2:31 p.m.1 views

USN-5821-2 wheel vulnerability

USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this...

7.5CVSS6.9AI score0.02659EPSS
Exploits1References2
OSV
OSV
added 2023/01/24 9:21 a.m.0 views

USN-5821-1 wheel vulnerability

Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS6.9AI score0.02659EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/01/17 12:0 a.m.31 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-wheel (SUSE-SU-2023:0088-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0088-1 advisory. - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers...

7.5CVSS6.9AI score0.02659EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/01/17 12:0 a.m.28 views

SUSE SLES12 Security Update : python-wheel (SUSE-SU-2023:0089-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0089-1 advisory. - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via...

7.5CVSS6.9AI score0.02659EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/01/17 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:0088-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02659EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/01/17 12:0 a.m.8 views

SUSE: Security Advisory (SUSE-SU-2023:0089-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02659EPSS
Exploits1References2
OSV
OSV
added 2023/01/16 9:31 a.m.6 views

SUSE-SU-2023:0089-1 Security update for python-wheel

This update for python-wheel fixes the following issues: - CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression bsc1206670...

7.5CVSS7.4AI score0.02659EPSS
Exploits1References3
OSV
OSV
added 2023/01/16 9:31 a.m.6 views

SUSE-SU-2023:0088-1 Security update for python-wheel

This update for python-wheel fixes the following issues: - CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression bsc1206670...

7.5CVSS7.4AI score0.02659EPSS
Exploits1References3
Veracode
Veracode
added 2022/12/23 6:23 a.m.47 views

Regular Expression Denial Of Service (ReDoS)

wheel is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the WHEELINFORE attribute in the init function of wheelfile.py, allowing an attacker to crash the application by passing a maliciously crafted Wheel file...

7.5CVSS7.3AI score0.02659EPSS
Exploits1References5Affected Software2
Github Security Blog
Github Security Blog
added 2022/12/23 12:30 a.m.33 views

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Packaging Authority PyPA Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Whee...

7.5CVSS7.3AI score0.02659EPSS
Exploits1References7Affected Software1
vulnersOsv
vulnersOsv
added 2022/12/23 12:30 a.m.3 views

a2ml (>=0.1.0 <=0.1.2), aadetools (>=0.0.3 <=0.0.5) +628 more potentially affected by CVE-2022-40898 via wheel (>=0.24.0 <=0.38.0)

wheel PYPI version =0.24.0, =0.1.0, =0.0.3, =0.1.1, =0.1.0, =1.0.0, =0.14.0, =1.4.6, =1.0.1, =1.0.17, =3.9.0, =2.4.1, =0.0.1, =1.0.1 and more Source cves: CVE-2022-40898 Source advisory: OSV:GHSA-QWMP-2CF2-G9G6...

7.5CVSS6.8AI score0.02659EPSS
Exploits1
OSV
OSV
added 2022/12/23 12:30 a.m.2 views

GHSA-QWMP-2CF2-G9G6 pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Packaging Authority PyPA Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Whee...

7.5CVSS6.7AI score0.02659EPSS
Exploits1References7
OSV
OSV
added 2022/12/23 12:15 a.m.22 views

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS7.2AI score
Exploits0References3
NVD
NVD
added 2022/12/23 12:15 a.m.25 views

CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS0.02659EPSS
Exploits1References3
OSV
OSV
added 2022/12/23 12:15 a.m.1 views

DEBIAN-CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS7AI score0.02659EPSS
Exploits1References1
OSV
OSV
added 2022/12/23 12:15 a.m.7 views

AZL-12098 CVE-2022-40898 affecting package python-wheel for versions less than 0.33.6-8

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS6.7AI score0.02659EPSS
Exploits1References1
Rows per page
Query Builder