Python: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2024-6232 Public exploit

  Regular-expression DoS when parsing TarFile headers

  There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

  Python Software Foundation CPython tensorflow python3.4 Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 3, 2024

Revision history

1. 2026-07-21 #51

   Neue Updates von Oracle Linux aufgenommen

2. 2026-07-09 #50

   Neue Updates von IBM aufgenommen

3. 2026-04-19 #49

   Neue Updates von Oracle Linux aufgenommen

4. 2026-03-09 #48

   Neue Updates von Oracle Linux aufgenommen

5. 2025-10-30 #47

   Neue Updates von Debian aufgenommen

6. 2025-10-01 #46

   Neue Updates von Dell aufgenommen

7. 2025-09-29 #45

   Neue Updates von Ubuntu aufgenommen

8. 2025-08-04 #44

   Neue Updates von Dell aufgenommen

9. 2025-06-12 #43

   Neue Updates von Gentoo aufgenommen

10. 2025-06-04 #42

    Neue Updates von SUSE aufgenommen

11. 2025-06-03 #41

    Neue Updates von SUSE aufgenommen

12. 2025-05-06 #40

    Neue Updates von Ubuntu aufgenommen

13. 2025-03-30 #39

    Neue Updates von IBM aufgenommen

14. 2025-03-19 #38

    Neue Updates von Oracle Linux aufgenommen

15. 2025-02-23 #37

    Neue Updates von Red Hat aufgenommen

16. 2025-02-13 #36

    Neue Updates von BROCADE aufgenommen

17. 2024-12-01 #35

    Neue Updates von Debian aufgenommen

18. 2024-11-21 #34

    Neue Updates von Ubuntu aufgenommen

19. 2024-11-20 #33

    Neue Updates von Red Hat und Oracle Linux aufgenommen

20. 2024-11-19 #32

    Neue Updates von Ubuntu und Oracle Linux aufgenommen

21. 2024-11-17 #31

    Neue Updates von Amazon aufgenommen

22. 2024-11-13 #30

    Neue Updates von Amazon aufgenommen

23. 2024-11-11 #29

    Neue Updates von Red Hat aufgenommen

24. 2024-11-10 #28

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

25. 2024-11-07 #27

    Neue Updates von Oracle Linux aufgenommen

References

• NIST Vulnerability Database vom 2024-09-03
  https://nvd.nist.gov/vuln/detail/CVE-2024-6232
• Python Security Annoubce vom 2024-09-03
  https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/
• CVE Database
  https://www.cve.org/CVERecord?id=CVE-2024-6232
• Fedora Security Advisory FEDORA-2024-C1D8FD5694 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c1d8fd5694
• Fedora Security Advisory FEDORA-2024-E887A10DEE vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e887a10dee
• Fedora Security Advisory FEDORA-2024-F2FC325C40 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f2fc325c40
• Fedora Security Advisory FEDORA-2024-F3FF13F3C2 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f3ff13f3c2
• Fedora Security Advisory FEDORA-2024-F750328C3B vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f750328c3b
• Fedora Security Advisory FEDORA-2024-091E2C7801 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-091e2c7801
• Fedora Security Advisory FEDORA-2024-1D0CB3B43F vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1d0cb3b43f
• Fedora Security Advisory FEDORA-2024-39D459DD00 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39d459dd00
• Fedora Security Advisory FEDORA-2024-6DEF755315 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6def755315
• Fedora Security Advisory FEDORA-2024-7DC0F381F1 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7dc0f381f1
• Fedora Security Advisory FEDORA-2024-E453A209E9 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e453a209e9
• Fedora Security Advisory FEDORA-2024-02027448D8 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-02027448d8
• Fedora Security Advisory FEDORA-2024-2B163F9201 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2b163f9201
• Fedora Security Advisory FEDORA-2024-37D9C902DD vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-37d9c902dd
• Fedora Security Advisory FEDORA-2024-F652468298 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f652468298
• Fedora Security Advisory FEDORA-2024-7DB9258D37 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7db9258d37
• Fedora Security Advisory FEDORA-2024-7A069F48E4 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7a069f48e4
• Fedora Security Advisory FEDORA-2024-308628EBB8 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-308628ebb8
• Fedora Security Advisory FEDORA-2024-1E6D6F8452 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1e6d6f8452
• Ubuntu Security Notice USN-7015-1 vom 2024-09-16
  https://ubuntu.com/security/notices/USN-7015-1
• openSUSE Security Update OPENSUSE-SU-2024:14340-1 vom 2024-09-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EB3HULWLZQ24PRVM3P2LCSJ3IJUISSTW/
• openSUSE Security Update OPENSUSE-SU-2024:14346-1 vom 2024-09-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBWVORMJLTP5YM7GG2KA4LSPGF6N5YVF/
• openSUSE Security Update OPENSUSE-SU-2024:14346-1 vom 2024-09-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/UBWVORMJLTP5YM7GG2KA4LSPGF6N5YVF/
• SUSE Security Update SUSE-SU-2024:3303-1 vom 2024-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019454.html
• openSUSE Security Update OPENSUSE-SU-2024:14345-1 vom 2024-09-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XGNLIXONZEJPUCB2A4GVFSDMNJ37VXYU/
• openSUSE Security Update OPENSUSE-SU-2024:14345-1 vom 2024-09-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XGNLIXONZEJPUCB2A4GVFSDMNJ37VXYU/
• Ubuntu Security Notice USN-7015-2 vom 2024-09-19
  https://ubuntu.com/security/notices/USN-7015-2
• SUSE Security Update SUSE-SU-2024:3357-1 vom 2024-09-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LIDNXNV744GNUVXIRCBTY2Q4CIZ3PIEN/
• Red Hat Security Advisory RHSA-2024:6909 vom 2024-09-23
  https://access.redhat.com/errata/RHSA-2024:6909
• Red Hat Security Advisory RHSA-2024:6975 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6975
• SUSE Security Update SUSE-SU-2024:3384-1 vom 2024-09-23
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019496.html
• SUSE Security Update SUSE-SU-2024:3411-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019505.html
• SUSE Security Update SUSE-SU-2024:3411-1 vom 2024-09-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QNXFOIXBCGZTXD6BKYGBL3VDWS6RK6AB/
• SUSE Security Update SUSE-SU-2024:3430-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019513.html
• SUSE Security Update SUSE-SU-2024:3418-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019511.html
• SUSE Security Update SUSE-SU-2024:3427-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019516.html
• Oracle Linux Security Advisory ELSA-2024-6975 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6975.html
• SUSE Security Update SUSE-SU-2024:3447-1 vom 2024-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019530.html
• SUSE Security Update SUSE-SU-2024:3470-1 vom 2024-09-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/3BRXVUEQCIBOPTQPNHGCO3VXFI46RYDG/
• Red Hat Security Advisory RHSA-2024:7415 vom 2024-10-01
  https://access.redhat.com/errata/RHSA-2024:7415
• Red Hat Security Advisory RHSA-2024:7443 vom 2024-10-01
  https://access.redhat.com/errata/RHSA-2024:7443
• Ubuntu Security Notice USN-7015-3 vom 2024-10-01
  https://ubuntu.com/security/notices/USN-7015-3
• Red Hat Security Advisory RHSA-2024:7647 vom 2024-10-03
  https://access.redhat.com/errata/RHSA-2024:7647
• Red Hat Security Advisory RHSA-2024:7726 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7726
• Red Hat Security Advisory RHSA-2024:7725 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7725
• Red Hat Security Advisory RHSA-2024:7724 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7724
• Red Hat Security Advisory RHSA-2024:7323 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7323
• Ubuntu Security Notice USN-7015-4 vom 2024-10-14
  https://ubuntu.com/security/notices/USN-7015-4
• Red Hat Security Advisory RHSA-2024:8130 vom 2024-10-15
  https://access.redhat.com/errata/RHSA-2024:8130
• Red Hat Security Advisory RHSA-2024:8359 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8359
• Red Hat Security Advisory RHSA-2024:8318 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8318
• Red Hat Security Advisory RHSA-2024:8374 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8374
• Oracle Linux Security Advisory ELSA-2024-8374 vom 2024-10-23
  https://linux.oracle.com/errata/ELSA-2024-8374.html
• Red Hat Security Advisory RHSA-2024:8446 vom 2024-10-24
  https://access.redhat.com/errata/RHSA-2024:8446
• Red Hat Security Advisory RHSA-2024:8447 vom 2024-10-24
  https://access.redhat.com/errata/RHSA-2024:8447
• Oracle Linux Security Advisory ELSA-2024-8359 vom 2024-10-25
  https://linux.oracle.com/errata/ELSA-2024-8359.html
• Oracle Linux Security Advisory ELSA-2024-8446 vom 2024-10-24
  https://linux.oracle.com/errata/ELSA-2024-8446.html
• Oracle Linux Security Advisory ELSA-2024-8447 vom 2024-10-25
  https://linux.oracle.com/errata/ELSA-2024-8447.html
• Rocky Linux Security Advisory RLSA-2024:8447 vom 2024-10-25
  https://errata.build.resf.org/RLSA-2024:8447
• Red Hat Security Advisory RHSA-2024:8490 vom 2024-10-28
  https://access.redhat.com/errata/RHSA-2024:8490
• F5 Security Advisory K000148252 vom 2024-10-25
  https://my.f5.com/manage/s/article/K000148252
• Rocky Linux Security Advisory RLSA-2024:8374 vom 2024-10-25
  https://errata.build.resf.org/RLSA-2024:8374
• Rocky Linux Security Advisory RLSA-2024:8446 vom 2024-10-25
  https://errata.build.resf.org/RLSA-2024:8446
• Red Hat Security Advisory RHSA-2024:8504 vom 2024-10-28
  https://access.redhat.com/errata/RHSA-2024:8504
• IBM Security Bulletin
  https://www.ibm.com/support/pages/node/7174634
• Red Hat Security Advisory RHSA-2024:8797 vom 2024-11-04
  https://access.redhat.com/errata/RHSA-2024:8797
• Red Hat Security Advisory RHSA-2024:8838 vom 2024-11-05
  https://access.redhat.com/errata/RHSA-2024:8838
• Red Hat Security Advisory RHSA-2024:8836 vom 2024-11-05
  https://access.redhat.com/errata/RHSA-2024:8836
• Red Hat Security Advisory RHSA-2024:8977 vom 2024-11-07
  https://access.redhat.com/errata/RHSA-2024:8977
• Oracle Linux Security Advisory ELSA-2024-8838 vom 2024-11-06
  https://linux.oracle.com/errata/ELSA-2024-8838.html
• Oracle Linux Security Advisory ELSA-2024-8836 vom 2024-11-08
  http://linux.oracle.com/errata/ELSA-2024-8836.html
• Rocky Linux Security Advisory RLSA-2024:8838 vom 2024-11-08
  https://errata.build.resf.org/RLSA-2024:8838
• Red Hat Security Advisory RHSA-2024:9468 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9468
• Red Hat Security Advisory RHSA-2024:9450 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9450
• Red Hat Security Advisory RHSA-2024:9451 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9451
• Amazon Linux Security Advisory ALASPYTHON3.8-2024-016 vom 2024-11-13
  https://alas.aws.amazon.com/AL2/ALASPYTHON3.8-2024-016.html
• Amazon Linux Security Advisory ALAS-2024-2694 vom 2024-11-15
  https://alas.aws.amazon.com/AL2/ALAS-2024-2694.html