Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.37 views

ABB M2M Gateway TLS Handshake bypass in embedded Python (CVE-2023-40217)

An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers such as HTTP servers that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is...

5.3CVSS7.2AI score0.0079EPSS
Exploits0References8
OSV
OSV
added 2025/01/16 7:21 a.m.7 views

BIT-PYTHON-MIN-2023-40217

An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers such as HTTP servers that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is...

5.3CVSS6.4AI score0.0079EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/11/23 12:0 a.m.50 views

Ubuntu 16.04 ESM / 18.04 ESM : Python vulnerabilities (USN-6513-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6513-1 advisory. It was discovered that Python incorrectly handled certain plist files. If a user or an automated system were tricked into processing a...

6.5CVSS7.2AI score0.01447EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/09/23 12:0 a.m.13 views

SUSE SLED12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2023:3730-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3730-1 advisory. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets bsc1214692. Tenable has extracted the preceding...

5.3CVSS6.8AI score0.0079EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/08/30 12:0 a.m.75 views

Python TLS Handshake Bypass (CVE-2023-40217)

The version of Python installed on the remote Windows host is potentially affected by a vulnerability that primarily affects servers such as HTTP servers that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,...

5.3CVSS7.1AI score0.0079EPSS
Exploits0References2
Rows per page
Query Builder