Lucene search

K
redhatRedHatRHSA-2024:3846
HistoryJun 11, 2024 - 6:28 p.m.

(RHSA-2024:3846) Moderate: python-idna security update

2024-06-1118:28:02
access.redhat.com
rhsa-2024
moderate
python-idna
security fix
dos
resource consumption
idna.encode()
cve-2024-3651
unix

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

The hsakmt packages include a thunk library for AMD’s Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd).

Security Fix(es):

  • python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)
OSVersionArchitecturePackageVersionFilename
RedHat9noarchpython3-idna< 2.10-7.el9_4.1python3-idna-2.10-7.el9_4.1.noarch.rpm

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%