CVE-2023-41419

CVE-2023-41419 affects the Gevent Python networking library, with vulnerable component WSGIServer. The Debian LTS advisory (DLA-4377-1) confirms the fix for Debian 11 in python-gevent package version 20.9.0-2+deb11u1; prior releases are vulnerable to privilege escalation via a crafted script. The...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

SUSE CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

PT-2023-5907

Name of the Vulnerable Software and Affected Versions Gevent versions prior to 23.9.1 Gevent version 23.9.0 Description The issue in Gevent is related to insufficient validation of executed requests in the WSGIServer component, allowing a remote attacker to escalate privileges via a crafted scrip...

Important Photon OS Security Update - PHSA-2023-5.0-0084

Updates of 'python3-gevent' packages of Photon OS have been released...

AZL-28597 CVE-2020-22217 affecting package python-gevent for versions less than 21.1.2-1

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

AZL-26942 CVE-2023-32067 affecting package python-gevent for versions less than 21.1.2-3

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...

AZL-26941 CVE-2023-31130 affecting package python-gevent for versions less than 21.1.2-3

c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to...

AZL-26876 CVE-2023-31147 affecting package python-gevent for versions less than 21.1.2-3

c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...

AZL-13828 CVE-2022-4904 affecting package python-gevent for versions less than 21.1.2-3

A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...

AZL-32282 CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames leading to Domain Hijacking and injection...

AZL-32281 CVE-2020-8277 affecting package python-gevent for versions less than 21.1.2-3

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...

ALBA-2019:3382 python-gevent bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. d...

python-gevent bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. d...

python-gevent bug fix and enhancement update

An update is available for python-gevent. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

Fedora 28 : uwsgi (2018-acfce682f4)

Fix building in Rawhide 1556525 Jakub Jelen - Disable tcpwrappers for Fedora 28 and newer Jakub Jelen --- - Modernize and generalize building of Python subpackages : - replace python with python2 - use appropriate macros for when refering to Python 3 - prefix Python-dependent plugins with the...

Fedora 27 : uwsgi (2018-04b3af1edf)

Conditionally disable router-access for tcpwrappers deprecation Jorge Gallegos - Updated to 2.0.16 which includes fix for CVE-2018-6758 Jorge Gallegos --- - Modernize and generalize building of Python subpackages : - replace python with python2 - use appropriate macros for when refering to Python...

BBQSQL - A Blind SQL Injection Exploitation Tool

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don't you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues. BBQSQL is a blind SQL injection framework written in Python. It is...

Object Scanning System: Laika BOSS

Laika is an object scanner and intrusion detection system that strives to achieve the following goals: Scalable Work across multiple systems High volume of input from many sources Flexible Modular architecture Highly configurable dispatching and dispositioning logic Tactical code insertion withou...