CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3

CVE-2021-22931 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

CVE-2023-31130 affecting package python-gevent for versions less than 21.1.2-3

CVE-2023-31130 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

CVE-2023-31147 affecting package python-gevent for versions less than 21.1.2-3

CVE-2023-31147 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

AZL-35132 CVE-2024-25629 affecting package python-gevent for versions less than 23.9.1-4

c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded...

AZL-34463 CVE-2024-25629 affecting package python-gevent for versions less than 21.1.2-3

c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded...

AZL-35133 CVE-2024-24806 affecting package python-gevent for versions less than 23.9.1-3

libuv is a multi-platform support library with a focus on asynchronous I/O. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its windows counterpart src/win/getaddrinfo.c, truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to create addresses...

CVE-2020-22217 affecting package python-gevent for versions less than 21.1.2-1

CVE-2020-22217 affecting package python-gevent for versions less than 21.1.2-1. A patched version of the package is available...

CVE-2022-4904 affecting package python-gevent for versions less than 21.1.2-3

CVE-2022-4904 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

CVE-2023-32067 affecting package python-gevent for versions less than 21.1.2-3

CVE-2023-32067 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

Security Bulletin: IBM Maximo Application Suite uses gevent-21.1.2-cp37-cp37m-manylinux2010_x86_64.whl which is vulnerable to CVE-2023-41419

Summary IBM Maximo Application Suite uses gevent-21.1.2-cp37-cp37m-manylinux2010x8664.whl which is vulnerable to CVE-2023-41419. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-41419 DESCRIPTION: Gevent could allow a remote attacker to...

Security Bulletin: Gevent, used in IBM Maximo Application Suite - Monitor Component, is vulnerable to CVE-2023-41419 which allows remote attackers to escalate privileges.

Summary IBM Maximo Application Suite - Monitor Component uses gevent, which is vulnerable to CVE-2023-41419. An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. This bulletin identifies the steps to take to...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (python-gevent) security update

An update for python-gevent is now available for Red Hat OpenStack Platform 17.1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-gevent: privilege escalation via a crafted script to the WSGIServer component

A flaw was found in python-event, which could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in the WSGIServer component. By using a specially crafted script, an attacker can gain elevated privileges...

CVE-2023-41419 affecting package python-gevent for versions less than 1.3.6-9

CVE-2023-41419 affecting package python-gevent for versions less than 1.3.6-9. A patched version of the package is available...

Security Bulletin: Vulnerability in CloudPak for Watson AIOps. [CVE-2023-41419]

Summary Gevent vulnerability was addressed in IBM Cloud Pak for Watson AIOps version 4.2.1. CVE-2023-41419 Vulnerability Details CVEID:CVE-2023-41419 DESCRIPTION: Gevent could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in the WSGIServer component. By using...

SUSE SLED15 / SLES15 Security Update : python-gevent (SUSE-SU-2023:4091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4091-1 advisory. - CVE-2023-41419: Fixed a http request smuggling bsc1215469. Tenable has extracted the preceding description block...

SUSE: Security Advisory (SUSE-SU-2023:4091-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4091-1 Security update for python-gevent

This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling bsc1215469...

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent module allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent is related to insufficient validation of executed requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity, availability, and confidentiality of the protected information...

SUSE-SU-2023:4009-1 Security update for python-gevent

This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling bsc1215469...