The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7024 advisory.

    - Security fixes for CVE-2023-40217 and CVE-2023-41105     Resolves: RHEL-3047, RHEL-3267
    - Fix symlink handling in the fix for CVE-2023-24329     Resolves: rhbz#263261
    - Security fix for CVE-2007-4559     Resolves: rhbz#263261

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0094 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-40217:
    An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x     before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If     a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,     there is a brief window where the SSLSocket instance will detect the socket as not connected and won't     initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not     be authenticated if the server-side TLS peer is expecting client certificate authentication, and is     indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the     buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path     requires that the connection be closed on initialization of the SSLSocket.)

    CVE-2023-41105:
    An issue was discovered in Python 3.11 through 3.11.4. If a path containing '0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0293 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2007-4559:
      Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module     in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence     in filenames in a TAR archive, a related issue to CVE-2001-1267.

      CVE-2023-41105:
      An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7136:08 advisory.

    * python: tarfile module directory traversal (CVE-2007-4559)
      * python: file path truncation at \0 characters (CVE-2023-41105)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

The remote NewStart CGSL host, running version MAIN 6.06, has python3@11 packages installed that are affected by a vulnerability:

  - An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x. (CVE-2023-41105)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6966:07 advisory.

    * python: tarfile module directory traversal (CVE-2007-4559)
      * python: file path truncation at \0 characters (CVE-2023-41105)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:7024 advisory.

  - Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in     Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in     filenames in a TAR archive, a related issue to CVE-2001-1267. (CVE-2007-4559)

  - An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x. (CVE-2023-41105)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3943-1 advisory.

    Update to 3.11.5.

    - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
    - CVE-2023-41105: Fixed input truncation on null bytes in os.path.normpath (bsc#1214693).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-317 advisory.

    An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x     before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If     a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,     there is a brief window where the SSLSocket instance will detect the socket as not connected and won't     initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not     be authenticated if the server-side TLS peer is expecting client certificate authentication, and is     indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the     buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path     requires that the connection be closed on initialization of the SSLSocket.) (CVE-2023-40217)

    An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x. (CVE-2023-41105)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6547-1 advisory.

    it was discovered that Python incorrectly handled null bytes when normalizing pathnames. An attacker could     possibly use this issue to bypass certain filename checks.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.11-3.11.5-1.el9 build changelog.

  - An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x     before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If     a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,     there is a brief window where the SSLSocket instance will detect the socket as not connected and won't     initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not     be authenticated if the server-side TLS peer is expecting client certificate authentication, and is     indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the     buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path     requires that the connection be closed on initialization of the SSLSocket.) (CVE-2023-40217)

  - An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to     os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible     cases in which an application would have rejected a filename for security reasons in Python 3.10.x or     earlier, but that filename is no longer rejected in Python 3.11.x. (CVE-2023-41105)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7024 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: tarfile module directory traversal (CVE-2007-4559)

    * python: file path truncation at \0 characters (CVE-2023-41105)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
186106	Oracle Linux 8 : python3.11 (ELSA-2023-7024)	Nessus	Oracle Linux Local Security Checks	2023/11/21	2025/9/9	high
239089	TencentOS Server 4: python3.11 (TSSA-2025:0094)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239436	TencentOS Server 3: python3.11 (TSSA-2023:0293)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
292809	MiracleLinux 8 : python3.11-3.11.5-1.el8 (AXSA:2023-7136:08)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
204217	Photon OS 5.0: Python3 PHSA-2023-5.0-0093	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/11/15	high
266245	NewStart CGSL MAIN 6.06 : python3@11 Vulnerability (NS-SA-2025-0238)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	high
293199	MiracleLinux 9 : python3.11-3.11.5-1.el9_3 (AXSA:2023-6966:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
190161	CentOS 8 : python3.11 (CESA-2023:7024)	Nessus	CentOS Local Security Checks	2024/2/8	2024/2/8	high
182500	SUSE SLED15: libpython3_11-1_0 / libpython3_11-1_0-32bit / python311 / etc (SUSE-SU-2023:3943-1)	Nessus	SuSE Local Security Checks	2023/10/4	2026/6/26	high
181168	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2023-317)	Nessus	Amazon Linux Local Security Checks	2023/9/8	2024/12/11	critical
186734	Ubuntu 23.04 : Python vulnerability (USN-6547-1)	Nessus	Ubuntu Local Security Checks	2023/12/11	2024/8/28	high
191365	CentOS 9 : python3.11-3.11.5-1.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	high
334087	Photon OS 5.0: Python3 PHSA-2023-5.0-91-0093	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	high
185652	RHEL 8 : python3.11 (RHSA-2023:7024)	Nessus	Red Hat Local Security Checks	2023/11/14	2024/11/7	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

critical

high

high

high

high