Lucene search
UbuntuUSN-6928-1HistoryJul 30, 2024 - 12:00 a.m.
Python vulnerabilities
2024-07-3000:00:00
ubuntu.com
40
python3.10
ssl module
memory race condition
certificate store
cve-2024-0397
ip address module
security policies
cve-2024-4032
ubuntu 22.04 lts
ubuntu 20.04 lts
python vulnerabilities
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
Low
Releases
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- python3.10 - An interactive high-level object-oriented language
- python3.8 - An interactive high-level object-oriented language
Details
It was discovered that the Python ssl module contained a memory race
condition when handling the APIs to obtain the CA certificates and
certificate store statistics. This could possibly result in applications
obtaining wrong results, leading to various SSL issues. (CVE-2024-0397)
It was discovered that the Python ipaddress module contained incorrect
information about which IP address ranges were considered “private” or
“globally reachable”. This could possibly result in applications applying
incorrect security policies. (CVE-2024-4032)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | python3.10 | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | idle-python3.10 | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10 | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10-dbg | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10-dev | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10-minimal | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10-stdlib | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | libpython3.10-testsuite | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | python3.10-dbg | < 3.10.12-1~22.04.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | python3.10-dev | < 3.10.12-1~22.04.5 | UNKNOWN |
Related
osv
osv
python3.10, python3.8 vulnerabilities
2024-07-30 13:20:37
python3.11 - security update
2024-08-27 00:00:00
CGA-9756-5pcx-hp5w
2024-07-15 21:54:19
openvas
openvas
Ubuntu: Security Advisory (USN-6928-1)
2024-07-31 00:00:00
openSUSE: Security Advisory for python39 (SUSE-SU-2024:2280-1)
2024-07-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2274-1)
2024-07-03 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : python39 (SUSE-SU-2024:2280-1)
2024-07-03 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Python vulnerabilities (USN-6928-1)
2024-07-30 00:00:00
SUSE SLES12 Security Update : python39 (SUSE-SU-2024:2274-1)
2024-07-03 00:00:00
ibm
ibm
Security Bulletin: AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032, CVE-2024-37891) due to Python
2024-09-17 23:09:34
aix
aix
almalinux
almalinux
Low: python3 security update
2024-07-23 00:00:00
Low: python3 security update
2024-07-23 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-08-28 00:00:00
cve
cve
CVE-2024-4032
2024-06-17 15:15:52
CVE-2024-0397
2024-06-17 16:15:10
redos
redos
ROS-20240917-08
2024-09-17 00:00:00
ROS-20240820-02
2024-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: python3-docs-3.12.4-1.fc40
2024-07-05 06:22:01
[SECURITY] Fedora 39 Update: python3.6-3.6.15-29.fc39
2024-07-13 02:42:13
[SECURITY] Fedora 40 Update: python3.6-3.6.15-31.fc40
2024-07-13 02:46:38
wolfi
wolfi
CVE-2024-4032 vulnerabilities
2024-09-18 21:11:55
nvd
nvd
CVE-2024-4032
2024-06-17 15:15:52
CVE-2024-0397
2024-06-17 16:15:10
vulnrichment
vulnrichment
CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges
2024-06-17 15:05:58
oraclelinux
oraclelinux
python3 security update
2024-07-23 00:00:00
python3 security update
2024-07-23 00:00:00
python39:3.9 and python39-devel:3.9 security update
2024-08-29 00:00:00
redhat
redhat
(RHSA-2024:4779) Low: python3 security update
2024-07-23 15:13:23
(RHSA-2024:4766) Low: python3 security update
2024-07-23 15:13:20
(RHSA-2024:6030) Low: python3 security update
2024-08-29 11:16:43
ubuntu
ubuntu
Python vulnerability
2024-08-01 00:00:00
ubuntucve
ubuntucve
CVE-2024-4032
2024-06-17 00:00:00
CVE-2024-0397
2024-06-17 00:00:00
cvelist
cvelist
CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges
2024-06-17 15:05:58
alpinelinux
alpinelinux
CVE-2024-4032
2024-06-17 15:15:52
redhatcve
redhatcve
CVE-2024-4032
2024-06-18 17:29:49
CVE-2024-0397
2024-07-31 09:20:07
cbl_mariner
cbl_mariner
CVE-2024-0397 affecting package python3 for versions less than 3.9.19-3
2024-08-05 03:22:58
CVE-2024-0397 affecting package python3 for versions less than 3.12.3-1
2024-08-25 15:13:42
debiancve
debiancve
CVE-2024-4032
2024-06-17 15:15:52
CVE-2024-0397
2024-06-17 16:15:10
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0334
2024-07-26 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0662
2024-08-02 00:00:00
slackware
slackware
[slackware-security] python3
2024-09-09 01:06:11
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
Low
Related for USN-6928-1