Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Fixed packages 35

Vulnerabilities 13

• Critical 9.8
  CVE-2024-42005

  Django SQL injection vulnerability

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-38875

  Django vulnerable to Denial of Service

  An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets.

  python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  Jul 10, 2024
• High 7.5
  CVE-2024-39614 Public exploit EPSS 29%

  Django vulnerable to Denial of Service

  An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

  python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  Jul 10, 2024
• High 7.5
  CVE-2024-41989

  Django memory consumption vulnerability

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-41990

  Django vulnerable to a denial-of-service attack

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-41991

  Django vulnerable to denial-of-service attack

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unico…

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• Medium 6.6
  CVE-2024-6840

  Automation-controller: gain access to the k8s api server via job execution with container group

  An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege esc…

  Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9 Red Hat Ansible Automation Platform 2.4 for RHEL 8
  Sep 12, 2024
• Medium 6.5
  CVE-2024-33663

  python-jose algorithm confusion guard bypassed by DER-encoded public keys

  python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

  python-jose python-jose python-jose Debian Ubuntu PyPI
  Apr 25, 2024
• Medium 6.3
  CVE-2024-7246

  HPACK table poisoning in gRPC C++, Python & Ruby

  It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but…

  Google gRPC grpc grpc Debian Ubuntu Azure Linux
  Aug 6, 2024
• Medium 6.2
  CVE-2024-5569

  Denial of Service via crafted zip file in jaraco/zipp

  A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile …

  jaraco jaraco/zipp kubeflow-pipelines-apiserver tensorflow Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jul 9, 2024
• Medium 5.3
  CVE-2024-39329

  Django vulnerable to user enumeration attack

  An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable pa…

  python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  Jul 10, 2024
• Medium 4.9
  CVE-2024-32879

  social-auth-app-django Improper Handling of Case Sensitivity vulnerability

  Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication user IDs are not case-sensitive and could cause different IDs to …

  python-social-auth social-app-django social-auth-app-django social-auth-app-django Debian Ubuntu PyPI
  Apr 24, 2024
• Medium 4.3
  CVE-2024-39330

  Django Path Traversal vulnerability

  An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. Derived classes of the django.core.files.storage.Storage base class, when they override generate_filename() without replicating the file-path validations from the parent class, potentia…

  python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  Jul 10, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2277035
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2277297
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295935
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295936
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2296413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302436
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6428.json
• report
  https://access.redhat.com/security/cve/CVE-2024-5569
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-5569
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-5569
• article
  https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd
• article
  https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae
• report
  https://access.redhat.com/security/cve/CVE-2024-6840
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-6840
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-6840
• report
  https://access.redhat.com/security/cve/CVE-2024-7246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2303104
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-7246
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-7246
• article
  https://github.com/grpc/grpc/issues/36245
• report
  https://access.redhat.com/security/cve/CVE-2024-32879
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-32879
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-32879
• article
  https://github.com/python-social-auth/social-app-django/security/advisories/GHSA-2gr8-3wc7-xhj3
• report
  https://access.redhat.com/security/cve/CVE-2024-33663
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-33663
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-33663
• report
  https://access.redhat.com/security/cve/CVE-2024-38875
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-38875
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-38875
• report
  https://access.redhat.com/security/cve/CVE-2024-39329
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-39329