The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8504 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python38 installed on the remote host is prior to 3.8.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2024-016 advisory.

    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in     Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in     filenames in a TAR archive, a related issue to CVE-2001-1267. (CVE-2007-4559)

    Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection     against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is     disputed by a third party because the http.server.html documentation page states Warning: http.server is     not recommended for production. It only implements basic security checks. (CVE-2021-28861)

    A defect was discovered in the Python ssl module where there is a memoryrace condition with the     ssl.SSLContext methods cert_store_stats() andget_ca_certs(). The race condition can be triggered if     the methods arecalled at the same time as certificates are loaded into the SSLContext,such as during the     TLS handshake with a certificate directory configured.This issue is fixed in CPython 3.10.14, 3.11.9,     3.12.3, and 3.13.0a5. (CVE-2024-0397)

    An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and     3.8.18 and prior.

    The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip format to create a     zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip     archives which overlap entries in the archive. (CVE-2024-0450)

    The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were     designated as globally reachable or private. This affected the is_private and is_global properties of     the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network     classes, where values wouldn't be returned in accordance with the latest information from the IANA     Special-Purpose Address Registries.

    CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended     behavior. (CVE-2024-4032)

    There is a MEDIUM severity vulnerability affecting CPython.





    Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are     vulnerable to ReDoS via specifically-crafted tar archives. (CVE-2024-6232)

    There is a MEDIUM severity vulnerability affecting CPython.

    Theemail module didn't properly quote newlines for email headers whenserializing an email message allowing     for header injection when an emailis serialized. (CVE-2024-6923)

    There is a LOW severity vulnerability affecting CPython, specifically the'http.cookies' standard library     module.

    When parsing cookies that contained backslashes for quoted characters inthe cookie value, the parser would     use an algorithm with quadraticcomplexity, resulting in excess CPU resources being used while parsing     thevalue. (CVE-2024-7592)

    There is a severity vulnerability affecting the CPython zipfilemodule.

    When iterating over names of entries in a zip archive (for example, methodsof zipfile.ZipFile like     namelist(), iterdir(), extractall(), etc)the process can be put into an infinite loop with a     maliciously craftedzip archive. This defect applies when reading only metadata or extractingthe contents     of the zip archive. Programs that are not handlinguser-controlled zip archives are not affected.
    (CVE-2024-8088)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1750 advisory.

    - Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0517 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2024-4032:
    The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses     were designated as globally reachable or private. This affected the is_private and is_global     properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and     ipaddress.IPv6Network classes, where values wouldnt be returned in accordance with the latest     information from the IANA Special-Purpose Address Registries.

    CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended     behavior.

    CVE-2024-6232:
    There is a MEDIUM severity vulnerability affecting CPython.





    Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are     vulnerable to ReDoS via specifically-crafted tar archives.

    CVE-2024-6923:
    There is a MEDIUM severity vulnerability affecting CPython.

    The     email module didnt properly quote newlines for email headers when     serializing an email message allowing for header injection when an email      is serialized.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1750 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103003 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

  - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were     designated as globally reachable or private. This affected the is_private and is_global properties of     the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network     classes, where values wouldn't be returned in accordance with the latest information from the IANA     Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these     registries and thus have the intended behavior. (CVE-2024-4032)

  - There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive     backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar     archives. (CVE-2024-6232)

  - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote     newlines for email headers when serializing an email message allowing for header injection when an email     is serialized. (CVE-2024-6923)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8374 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8374 advisory.

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8374 advisory.

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148252 advisory.

    There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive     backtracking during tarfile. TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar     archives.(CVE-2024-6232)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9260:07 advisory.

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8970:09 advisory.

    * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in     NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as     libndp was not correctly validating the route length information. (CVE-2024-5564)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In     affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol,     but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated,     thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an     exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
    (CVE-2023-23931)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
210499	RHEL 8 : python39:3.9 (RHSA-2024:8504)	Nessus	Red Hat Local Security Checks	2024/11/7	2024/11/7	high
210923	Amazon Linux 2 : python38 (ALASPYTHON3.8-2024-016)	Nessus	Amazon Linux Local Security Checks	2024/11/13	2024/12/11	high
232885	Oracle Linux 7 : python3 (ELSA-2025-1750)	Nessus	Oracle Linux Local Security Checks	2025/3/19	2025/9/11	high
238984	TencentOS Server 3: python3 (TSSA-2024:0517)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
216683	RHEL 7 : python3 (RHSA-2025:1750)	Nessus	Red Hat Local Security Checks	2025/2/24	2025/6/5	high
216474	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103003)	Nessus	Misc.	2025/2/19	2025/2/19	critical
209566	RHEL 9 : python3.11 (RHSA-2024:8374)	Nessus	Red Hat Local Security Checks	2024/10/23	2024/11/7	high
209631	AlmaLinux 9 : python3.11 (ALSA-2024:8374)	Nessus	Alma Linux Local Security Checks	2024/10/24	2024/10/25	high
209702	RockyLinux 9 : python3.11 (RLSA-2024:8374)	Nessus	Rocky Linux Local Security Checks	2024/10/25	2024/10/25	high
209708	F5 Networks BIG-IP : Python tarfile vulnerability (K000148252)	Nessus	F5 Networks Local Security Checks	2024/10/25	2025/3/27	high
292908	MiracleLinux 9 : python3.9-3.9.19-8.el9.1 (AXSA:2024-9260:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293200	MiracleLinux 8 : python3.12-3.12.6-1.el8_10 (AXSA:2024-8970:09)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
212124	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)	Nessus	Misc.	2024/12/6	2026/6/30	medium

检测

插件搜索

high

high

high

high

high

critical

high

high

high

high

high

high

medium