Denial Of Service (DoS)

🗓️ 15 Apr 2024 11:56:57Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

idna vulnerability in encode functio

Reporter	Title	Published	Views	Family All 305
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	6 May 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.	17 Jun 202411:59	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulnerabilities in IBM Spectrum Symphony with Requests and urlib3	23 Oct 202520:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in idna ( CVE-2024-3651) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in idna ( CVE-2024-3651) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	17 Oct 202408:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to a possible denial-of- service for Python-idna CVE-2024-3651	5 May 202506:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale are now fixed.	17 Dec 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Advanced Communications is affected by vulnerabilities in kjd/idna library	13 Jan 202612:43	–	ibm

Vulners

Node

py3-idna py3-idnaMatch3.4-r4python

AND

py3-idna py3-idnaMatch3.6-r0python

AND

alpinelinux alpine_linuxMatch3.19

OR

py3-idna py3-idnaMatch3.1-r1python

AND

py3-idna py3-idnaMatch3.6-r0python

AND

py3-idna py3-idnaMatch3.1-r0python

AND

py3-idna py3-idnaMatch3.3-r1python

AND

py3-idna py3-idnaMatch3.4-r3python

AND

py3-idna py3-idnaMatch3.4-r4python

AND

py3-idna py3-idnaMatch3.4-r2python

AND

py3-idna py3-idnaMatch3.3-r0python

AND

py3-idna py3-idnaMatch3.3-r2python

AND

py3-idna py3-idnaMatch3.4-r1python

AND

py3-idna py3-idnaMatch3.2-r0python

AND

py3-idna py3-idnaMatch2.9-r0python

AND

alpinelinux alpine_linuxMatchedge

OR

idna idnaRange0.2–3.6python

Source	Link
github	www.github.com/kjd/idna/commit/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
github	www.github.com/advisories/GHSA-jjg7-2v4v-x38h
github	www.github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d
huntr	www.huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb

11 Jul 2024 16:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 36.2 - 7.5

EPSS0.00689

SSVC

denial of service idna encode function significant resources software