The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7488-1 advisory.

    It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could     possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected     python 2.7 and python3.4 on Ubuntu 14.04 LTS; python2.7 on Ubuntu 16.04 LTS; python2.7, python3.6,     python3.7, and python3.8 on Ubuntu 18.04 LTS; python2.7 and python3.9 on Ubuntu 20.04 LTS; and python2.7     and python3.11 on Ubuntu 22.04 LTS. (CVE-2024-11168)

    It was discovered that Python allowed excessive backtracking while parsing certain tarfile headers. A     remote attacker could possibly use this issue to cause Python to consume excessive resources, leading to a     denial of service. This issue only affected python3.4 on Ubuntu 14.04 LTS; python3.6, python3.7, and     python3.8 on Ubuntu 18.04 LTS; python3.9 on Ubuntu 20.04 LTS; and python3.11 on Ubuntu 22.04 LTS.
    (CVE-2024-6232)

    It was discovered that Python incorrectly handled quoted path names when using the venv module. A local     attacker able to control virtual environments could possibly use this issue to execute arbitrary code when     the virtual environment is activated. This issue only affected python3.4 on Ubuntu 14.04 LTS; python3.6,     python3.7, and python3.8 on Ubuntu 18.04 LTS; python3.9 on Ubuntu 20.04 LTS; python3.11 on Ubuntu 22.04     LTS; and python3.13 on Ubuntu 24.10. (CVE-2024-9287)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2797 advisory.

    An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and     3.8.18 and prior.

    The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip format to create a     zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip     archives which overlap entries in the archive. (CVE-2024-0450)

    The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing     hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled     SSRF if a URL is processed by more than one URL parser. (CVE-2024-11168)

    There is a MEDIUM severity vulnerability affecting CPython.

    Theemail module didn't properly quote newlines for email headers whenserializing an email message allowing     for header injection when an emailis serialized. (CVE-2024-6923)

    There is a LOW severity vulnerability affecting CPython, specifically the'http.cookies' standard library     module.

    When parsing cookies that contained backslashes for quoted characters inthe cookie value, the parser would     use an algorithm with quadraticcomplexity, resulting in excess CPU resources being used while parsing     thevalue. (CVE-2024-7592)

    The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that     included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be     used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential     parsing across the Python URL parser and other specification-compliant URL parsers. (CVE-2025-0938)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-500 advisory.

    2025-01-16: CVE-2024-11168 was added to this advisory.

    An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting     methods by supplying a URL that starts with blank characters. (CVE-2023-24329)

    The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing     hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled     SSRF if a URL is processed by more than one URL parser. (CVE-2024-11168)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10983 advisory.

    * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

    * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
235360	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 : Python vulnerabilities (USN-7488-1)	Nessus	Ubuntu Local Security Checks	2025/5/6	2025/5/6	medium
233392	Amazon Linux 2 : python (ALAS-2025-2797)	Nessus	Amazon Linux Local Security Checks	2025/3/27	2025/3/27	medium
189329	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2024-500)	Nessus	Amazon Linux Local Security Checks	2024/1/23	2025/1/23	medium
232926	RockyLinux 9 : python3.9:3.9.21 (RLSA-2024:10983)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	medium

检测

插件搜索

medium

medium

medium

medium