Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:1361412562310856050HistoryApr 09, 2024 - 12:00 a.m.
openSUSE: Security Advisory for python310 (SUSE-SU-2024:1162-1)
2024-04-0900:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
8
opensuse
python310
security advisory
suse-su-2024:1162-1
cve-2024-0450
vulnerability
update
package
opensuse leap 15.4
opensuse leap 15.5
fix
denial of service
tempfile
symlink
crypto-policies
zip file
expat module
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
38.0%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.856050");
script_version("2024-05-16T05:05:35+0000");
script_cve_id("CVE-2023-52425", "CVE-2023-6597", "CVE-2024-0450");
script_tag(name:"cvss_base", value:"7.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:C");
script_tag(name:"last_modification", value:"2024-05-16 05:05:35 +0000 (Thu, 16 May 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-02-09 02:03:16 +0000 (Fri, 09 Feb 2024)");
script_tag(name:"creation_date", value:"2024-04-09 01:06:30 +0000 (Tue, 09 Apr 2024)");
script_name("openSUSE: Security Advisory for python310 (SUSE-SU-2024:1162-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=(openSUSELeap15\.4|openSUSELeap15\.5)");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2024:1162-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/7G2ALVKTKEOALRI4UF5URBF6ON7EXI7J");
script_tag(name:"summary", value:"The remote host is missing an update for the 'python310'
package(s) announced via the SUSE-SU-2024:1162-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for python310 fixes the following issues:
* CVE-2024-0450: Fixed 'quoted-overlap' in zipfile module is python310
(bsc#1221854)
* CVE-2023-52425: Fixed denial of service caused by processing large tokens in
expat module in python310 (bsc#1219559)
* CVE-2023-6597: Fixed tempfile.TemporaryDirectory fails on removing dir in
some edge cases related to symlinks in python310 (bsc#1219666)
Other changes:
* Revert %autopatch due to missing parameter support (bsc#1189495)
* Extended crypto-policies support (bsc#1211301)
##");
script_tag(name:"affected", value:"'python310' package(s) on openSUSE Leap 15.4, openSUSE Leap 15.5.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.4") {
if(!isnull(res = isrpmvuln(pkg:"python310-devel", rpm:"python310-devel~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debugsource", rpm:"python310-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm", rpm:"python310-dbm~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tools", rpm:"python310-tools~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-debuginfo", rpm:"libpython3_10-1_0-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-idle", rpm:"python310-idle~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk", rpm:"python310-tk~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk-debuginfo", rpm:"python310-tk-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses-debuginfo", rpm:"python310-curses-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debuginfo", rpm:"python310-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses", rpm:"python310-curses~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc-devhelp", rpm:"python310-doc-devhelp~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-debuginfo", rpm:"python310-base-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite-debuginfo", rpm:"python310-testsuite-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm-debuginfo", rpm:"python310-dbm-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0", rpm:"libpython3_10-1_0~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite", rpm:"python310-testsuite~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc", rpm:"python310-doc~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310", rpm:"python310~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-core-debugsource", rpm:"python310-core-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base", rpm:"python310-base~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit-debuginfo", rpm:"python310-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit-debuginfo", rpm:"libpython3_10-1_0-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit", rpm:"libpython3_10-1_0-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit", rpm:"python310-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit", rpm:"python310-base-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit-debuginfo", rpm:"python310-base-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-64bit", rpm:"python310-base-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-64bit-debuginfo", rpm:"python310-base-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-64bit-debuginfo", rpm:"python310-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-64bit-debuginfo", rpm:"libpython3_10-1_0-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-64bit", rpm:"python310-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-64bit", rpm:"libpython3_10-1_0-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-devel", rpm:"python310-devel~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debugsource", rpm:"python310-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm", rpm:"python310-dbm~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tools", rpm:"python310-tools~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-debuginfo", rpm:"libpython3_10-1_0-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-idle", rpm:"python310-idle~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk", rpm:"python310-tk~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk-debuginfo", rpm:"python310-tk-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses-debuginfo", rpm:"python310-curses-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debuginfo", rpm:"python310-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses", rpm:"python310-curses~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc-devhelp", rpm:"python310-doc-devhelp~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-debuginfo", rpm:"python310-base-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite-debuginfo", rpm:"python310-testsuite-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm-debuginfo", rpm:"python310-dbm-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0", rpm:"libpython3_10-1_0~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite", rpm:"python310-testsuite~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc", rpm:"python310-doc~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310", rpm:"python310~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-core-debugsource", rpm:"python310-core-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base", rpm:"python310-base~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit-debuginfo", rpm:"python310-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit-debuginfo", rpm:"libpython3_10-1_0-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit", rpm:"libpython3_10-1_0-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit", rpm:"python310-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit", rpm:"python310-base-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit-debuginfo", rpm:"python310-base-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-64bit", rpm:"python310-base-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-64bit-debuginfo", rpm:"python310-base-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-64bit-debuginfo", rpm:"python310-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-64bit-debuginfo", rpm:"libpython3_10-1_0-64bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-64bit", rpm:"python310-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-64bit", rpm:"libpython3_10-1_0-64bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.4"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "openSUSELeap15.5") {
if(!isnull(res = isrpmvuln(pkg:"python310-devel", rpm:"python310-devel~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debugsource", rpm:"python310-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm", rpm:"python310-dbm~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tools", rpm:"python310-tools~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-debuginfo", rpm:"libpython3_10-1_0-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-idle", rpm:"python310-idle~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk", rpm:"python310-tk~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk-debuginfo", rpm:"python310-tk-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses-debuginfo", rpm:"python310-curses-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debuginfo", rpm:"python310-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses", rpm:"python310-curses~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc-devhelp", rpm:"python310-doc-devhelp~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-debuginfo", rpm:"python310-base-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite-debuginfo", rpm:"python310-testsuite-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0", rpm:"libpython3_10-1_0~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm-debuginfo", rpm:"python310-dbm-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc", rpm:"python310-doc~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite", rpm:"python310-testsuite~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310", rpm:"python310~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-core-debugsource", rpm:"python310-core-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base", rpm:"python310-base~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit-debuginfo", rpm:"python310-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit-debuginfo", rpm:"libpython3_10-1_0-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit", rpm:"libpython3_10-1_0-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit", rpm:"python310-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit", rpm:"python310-base-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit-debuginfo", rpm:"python310-base-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-devel", rpm:"python310-devel~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debugsource", rpm:"python310-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm", rpm:"python310-dbm~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tools", rpm:"python310-tools~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-debuginfo", rpm:"libpython3_10-1_0-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-idle", rpm:"python310-idle~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk", rpm:"python310-tk~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-tk-debuginfo", rpm:"python310-tk-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses-debuginfo", rpm:"python310-curses-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-debuginfo", rpm:"python310-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-curses", rpm:"python310-curses~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc-devhelp", rpm:"python310-doc-devhelp~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-debuginfo", rpm:"python310-base-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite-debuginfo", rpm:"python310-testsuite-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0", rpm:"libpython3_10-1_0~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-dbm-debuginfo", rpm:"python310-dbm-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-doc", rpm:"python310-doc~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-testsuite", rpm:"python310-testsuite~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310", rpm:"python310~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-core-debugsource", rpm:"python310-core-debugsource~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base", rpm:"python310-base~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit-debuginfo", rpm:"python310-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit-debuginfo", rpm:"libpython3_10-1_0-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libpython3_10-1_0-32bit", rpm:"libpython3_10-1_0-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-32bit", rpm:"python310-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit", rpm:"python310-base-32bit~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python310-base-32bit-debuginfo", rpm:"python310-base-32bit-debuginfo~3.10.14~150400.4.45.1", rls:"openSUSELeap15.5"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1162-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1009-1)
2024-05-07 00:00:00
Slackware: Security Advisory (SSA:2024-080-01)
2024-03-21 00:00:00
slackware
slackware
[slackware-security] python3
2024-03-20 21:14:26
nessus
nessus
mageia
mageia
Updated python3, python packages fix security vulnerabilities
2024-03-28 06:52:55
osv
osv
Important: python3 security update
2024-06-14 13:59:16
Important: python3.9 security update
2024-07-02 14:11:27
Important: python3 security update
2024-05-23 00:00:00
debian
debian
[SECURITY] [DLA 3772-1] python3.7 security update
2024-03-24 21:51:46
[SECURITY] [DLA 3783-1] expat security update
2024-04-09 04:41:36
almalinux
almalinux
Important: python3.9 security update
2024-06-25 00:00:00
Important: python3 security update
2024-05-23 00:00:00
Important: python3.11 security update
2024-06-24 00:00:00
redhat
redhat
(RHSA-2024:4406) Important: python3 security update
2024-07-09 08:31:13
(RHSA-2024:3347) Important: python3 security update
2024-05-23 14:21:45
(RHSA-2024:4078) Important: python3.9 security update
2024-06-25 04:51:05
fedora
fedora
[SECURITY] Fedora 40 Update: python3.6-3.6.15-30.fc40
2024-05-31 01:17:14
[SECURITY] Fedora 39 Update: python3.6-3.6.15-28.fc39
2024-06-01 01:12:49
[SECURITY] Fedora 38 Update: thunderbird-115.10.1-4.fc38
2024-05-02 01:44:57
rocky
rocky
python3.9 security update
2024-07-02 14:11:27
python3 security update
2024-06-14 13:59:16
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
oraclelinux
oraclelinux
python3.9 security update
2024-06-25 00:00:00
python3 security update
2024-05-29 00:00:00
python3.11 security update
2024-06-24 00:00:00
ibm
ibm
Security Bulletin: AIX is affected by multiple vulnerabilities due to Python (CVE-2023-52425, CVE-2023-52426, CVE-2023-6597)
2024-04-11 22:15:48
aix
aix
prion
prion
Design/Logic Flaw
2024-02-04 20:15:00
cve
cve
CVE-2023-6597
2024-03-19 16:15:08
CVE-2023-52425
2024-02-04 20:15:46
cgr
cgr
CVE-2023-6597 vulnerabilities
2024-05-19 03:07:16
amazon
amazon
Important: python3
2024-05-09 19:16:00
cbl_mariner
cbl_mariner
CVE-2023-52425 affecting package expat for versions less than 2.6.2-1
2024-06-21 09:32:44
CVE-2023-52425 affecting package expat for versions less than 2.6.2-2
2024-04-09 20:48:36
vulnrichment
vulnrichment
CVE-2023-52425
2024-02-04 00:00:00
CVE-2023-6597
2024-03-19 15:44:28
f5
f5
K000139630: Expat vulnerability CVE-2023-52425
2024-05-16 00:00:00
cvelist
cvelist
CVE-2023-52425
2024-02-04 00:00:00
CVE-2023-6597
2024-03-19 15:44:28
alpinelinux
alpinelinux
CVE-2023-52425
2024-02-04 20:15:46
CVE-2023-6597
2024-03-19 16:15:08
veracode
veracode
Denial Of Service
2024-02-11 08:46:00
Improper Authorization
2024-03-26 21:20:32
debiancve
debiancve
CVE-2023-52425
2024-02-04 20:15:46
redhatcve
redhatcve
CVE-2023-52425
2024-02-05 23:59:53
CVE-2023-6597
2024-04-22 20:34:25
wolfi
wolfi
CVE-2023-6597 vulnerabilities
2024-09-20 03:31:47
redos
redos
ROS-20240820-04
2024-08-20 00:00:00
nvd
nvd
CVE-2023-52425
2024-02-04 20:15:46
ubuntucve
ubuntucve
CVE-2023-52425
2024-02-04 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
38.0%
Related for OPENVAS:1361412562310856050