Description
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kjd | kjd/idna | unspecified – < 3.7 | 3.7 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-idna | 3.6-2.1 | — |
| Debian 13 | python-idna | 3.6-2.1 | — |
| Debian 12 | python-idna | 3.3-1+deb12u1 | — |
| Debian 10 | python-idna | 2.6-1+deb10u1 | DLA-3811-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | python-idna | 3.6-2ubuntu0.1 | USN-6780-1 |
| Ubuntu 24.04 LTS | python-pip | 24.0+dfsg-1ubuntu1.3 | USN-7762-1 |
| Ubuntu 22.04 LTS | python-idna | 3.3-1ubuntu0.1 | USN-6780-1 |
| Ubuntu 22.04 LTS | python-pip | 22.0.2+dfsg-1ubuntu0.7 | USN-7762-1 |
| Ubuntu 20.04 LTS | python-idna | 2.8-1ubuntu0.1 | USN-6780-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | python-pip | 20.0.2-5ubuntu1.10+esm2 | — |
| Ubuntu Pro 18.04 LTS | python-idna | 2.6-1ubuntu0.1~esm1 | USN-6780-1 |
| Ubuntu Pro 18.04 LTS | python-pip | 9.0.1-2.3~ubuntu1.18.04.8+esm4 | — |
| Ubuntu Pro 16.04 LTS | python-idna | 2.0-3ubuntu0.1~esm1 | USN-6780-1 |
| Ubuntu Pro 16.04 LTS | python-pip | 8.1.1-2ubuntu0.6+esm8 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | python-idna +1 | 2.10-7.el9_4.1 | RHSA-2024:3846 |
| RHEL 8 | Cython +1 | 0.29.21-5.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | PyYAML +1 | 5.4.1-1.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | mod_wsgi +1 | 4.7.1-7.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | numpy +3 | 1.19.4-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | pybind11 +2 | 2.7.1-1.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | pytest +1 | 6.0.2-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-PyMySQL +1 | 0.10.1-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-attrs +1 | 20.3.0-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-cffi +1 | 1.14.3-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-chardet +1 | 3.0.4-19.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-cryptography +1 | 3.3.1-3.module+el8.10.0+21271+eccd1d86 | RHSA-2024:3466 |
| RHEL 8 | python-idna +1 | 2.5-7.el8_10 | RHSA-2024:4260, RHSA-2024:3466 |
| RHEL 8 | python-iniconfig +1 | 1.1.1-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-lxml +1 | 4.6.5-1.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-more-itertools +1 | 8.5.0-2.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-packaging +1 | 20.4-4.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-pluggy +1 | 0.13.1-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-ply +1 | 3.11-10.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-psutil +1 | 5.8.0-4.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-psycopg2 +3 | 2.8.6-3.module+el8.10.0+21142+453d2b75 | RHSA-2024:3466 |
| RHEL 8 | python-py +1 | 1.10.0-1.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-pycparser +1 | 2.20-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-pysocks +1 | 1.7.1-4.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-requests +1 | 2.25.0-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-toml +1 | 0.10.1-5.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-urllib3 +1 | 1.25.10-5.module+el8.10.0+20443+f0a692fe | RHSA-2024:3466 |
| RHEL 8 | python-wcwidth +1 | 0.2.5-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python-wheel +2 | 1:0.35.1-4.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python39 +7 | 3.9.19-1.module+el8.10.0+21815+bb024982 | RHSA-2024:3466 |
| RHEL 8 | python39-idna | 2.10-4.module+el8.10.0+21815+bb024982 | RHSA-2024:3466 |
| RHEL 8 | python39-pip +2 | 20.2.4-9.module+el8.10.0+21329+8d76b841 | RHSA-2024:3466 |
| RHEL 8 | python39-pyparsing +1 | 2.4.7-5.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | python39-setuptools +2 | 50.3.2-5.module+el8.10.0+20345+671a55aa | RHSA-2024:3466 |
| RHEL 8 | python39-six +1 | 1.15.0-3.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
| RHEL 8 | scipy +1 | 1.5.4-5.module+el8.9.0+19644+d68f775d | RHSA-2024:3466 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.8 EUS | python-idna +1 | 2.5-5.el8_8.1 | RHSA-2024:3543 |
| RHEL 8.6 TUS | python-idna +1 | 2.5-5.el8_6.1 | RHSA-2024:3552 |
| RHEL 8.6 E4S | python-idna +1 | 2.5-5.el8_6.1 | RHSA-2024:3552 |
| RHEL 8.6 AUS | python-idna +1 | 2.5-5.el8_6.1 | RHSA-2024:3552 |
| RHEL 7 ELS | python-idna | 2.4-2.el7_9 | RHSA-2024:8365 |
| Red Hat Ansible Automation Platform Inside 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-idna +1 | 3.7-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-requests +1 | 2.32.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-idna +1 | 3.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-requests +1 | 2.32.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.5.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | automation-hub +2 | 4.9.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-aiohttp +1 | 3.9.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-galaxy-ng +1 | 4.9.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-gunicorn +1 | 22.0.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-idna +1 | 3.7-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-pillow +1 | 10.3.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-pydantic +1 | 1.10.15-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-requests +1 | 2.32.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-social-auth-app-django +1 | 5.4.1-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-sqlparse +1 | 0.5.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-aiohttp +1 | 3.9.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-gunicorn +1 | 22.0.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-idna +1 | 3.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-pillow +1 | 10.3.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-pydantic +1 | 1.10.15-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-requests +1 | 2.32.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-social-auth-app-django +1 | 5.4.1-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-sqlparse +1 | 0.5.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | python3-idna | 2.10-7.el9_4.1 | ALSA-2024:3846 |
| AlmaLinux 8 | python3-idna | 2.5-7.el8_10 | ALSA-2024:4260 |
| AlmaLinux 8 | python39 +7 | 3.9.19-1.module_el8.10.0+3849+a48d89aa | ALSA-2024:3466 |
| AlmaLinux 8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:3466 |
| AlmaLinux 8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2024:3466 |
| AlmaLinux 8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-mod_wsgi | 4.7.1-7.module_el8.9.0+3634+fb2a896c | ALSA-2024:3466 |
| AlmaLinux 8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-numpy +2 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pip +1 | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-psycopg2 +2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:3466 |
| AlmaLinux 8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pybind11 +1 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2024:3466 |
| AlmaLinux 8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2024:3466 |
| AlmaLinux 8 | python39-setuptools +1 | 50.3.2-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:3466 |
| AlmaLinux 8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:3466 |
| AlmaLinux 8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
| AlmaLinux 8 | python39-wheel +1 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:3466 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | python-idna | 2.10-7.el9_4.1 | RLSA-2024:3846 |
| Rocky Linux 8 | python-idna | 2.5-7.el8_10 | RLSA-2024:4260 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| SLES 15 SP4 | python-idna | 3.4-150400.11.10.1 | SUSE-SU-2024:1939-1 |
| SLES 12 SP5 | python-idna | 2.5-3.13.1 | SUSE-SU-2024:1428-1 |
| SLES 12 | python-idna | 2.5-3.13.1 | SUSE-SU-2024:1428-1 |
| SLES 3 | python-idna | 3.4-150400.11.10.1 | SUSE-SU-2024:1939-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | python-idna | 2.5-3.13.1 | SUSE-SU-2024:1428-1 |
| SLE Micro 5.5 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-2, SUSE-SU-2024:1439-1 |
| SLE Micro 5.4 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| SLE Micro 5.3 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| SLE Micro 5.2 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| SLE Micro 5.1 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| SUSE Manager Server Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Proxy Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools for SLE Micro 5 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1, SUSE-EL-9-CLIENT-TOOLS-2024-4029 |
| SUSE Manager Client Tools 15 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools 12 | venv-salt-minion | 3006.0-3.65.1 | SUSE-SU-2024:4020-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy +1 | 3.11.9-1.26.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-cryptography | 3.3.2-1.18.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-docker | 7.0.0-1.8.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-idna | 3.4-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-passlib +1 | 1.7.4-1.3.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-setuptools | 67.7.2-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-urllib3 | 2.0.7-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-zipp | 3.15.0-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-idna | 3.7-1.1 | openSUSE-SU-2026:11711-1, openSUSE-SU-2024:13874-1 |
| openSUSE Leap 15.6 | python-idna | 3.4-150400.11.10.1 | SUSE-SU-2024:1939-1 |
| openSUSE Leap 15.5 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1939-1, SUSE-SU-2024:1439-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
| openSUSE Leap Micro 5.3 | python-idna | 2.6-150000.3.3.1 | SUSE-SU-2024:1439-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | py3-idna | 3.7-r0 | — |
| Alpine v3.23 | py3-idna | 3.7-r0 | — |
| Alpine v3.22 | py3-idna | 3.7-r0 | — |
| Alpine v3.21 | py3-idna | 3.7-r0 | — |
| Alpine v3.20 | py3-idna | 3.7-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | py3-idna | 3.7-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3-idna | 2.10-3.amzn2023.0.3 | ALAS2023-2024-763 |
| Amazon Linux 2023 | python3-pip +1 | 21.3.1-2.amzn2023.0.9 | ALAS2023-2024-764 |
| Amazon Linux 2023 | python3.11-pip +1 | 22.3.1-2.amzn2023.0.4 | ALAS2023-2024-762 |
| Amazon Linux 2 | python-idna | 2.4-1.amzn2.0.1 | ALAS2-2024-2680 |
| Amazon Linux 2 | python2-pip +2 | 20.2.2-1.amzn2.0.7 | ALAS2-2024-2679 |
| Amazon Linux 2 | python3-idna | 2.7-2.amzn2.0.3 | ALAS2-2024-2699 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-idna | 3.7-1 | — |
| Azure Linux 3 | python-pip | 24.0-2 | — |
| Azure Linux 3 | tensorflow | 2.16.1-7 | — |
| Azure Linux 2 (CBL-Mariner) | python-idna | 3.7-1 | — |
| Azure Linux 2 (CBL-Mariner) | python3 | 3.9.19-13 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | python3-idna | 2.10-7.0.1.el9_4.1 | ELSA-2024-3846 |
| Oracle Linux 8 | python3-idna | 2.5-7.el8_10 | ELSA-2024-4260 |
| Oracle Linux 8 | python39 +7 | 3.9.19-1.module+el8.10.0+90341+71ca88f4 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-PyMySQL | 0.10.1-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-cffi | 1.14.3-2.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-chardet | 3.0.4-19.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-cryptography | 3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-idna | 2.10-4.module+el8.10.0+90341+71ca88f4 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-lxml | 4.6.5-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-mod_wsgi | 4.7.1-7.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-numpy +2 | 1.19.4-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-pip +1 | 20.2.4-9.module+el8.10.0+90269+2fa22b99 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-ply | 3.11-10.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-psutil | 5.8.0-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-psycopg2 +2 | 2.8.6-3.module+el8.10.0+90269+2fa22b99 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-pycparser | 2.20-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-pysocks | 1.7.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-pyyaml | 5.4.1-1.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-requests | 2.25.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-scipy | 1.5.4-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-setuptools +1 | 50.3.2-5.module+el8.10.0+90269+2fa22b99 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-six | 1.15.0-3.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-toml | 0.10.1-5.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-urllib3 | 1.25.10-5.module+el8.10.0+90269+2fa22b99 | ELSA-2024-3466 |
| Oracle Linux 8 | python39-wheel +1 | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 | ELSA-2024-3466 |
| Oracle Linux 7 | python-idna | 2.4-1.0.1.el7 | ELSA-2024-8365 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | az +1 | 2.60.0-r0 | — |
| Wolfi rolling | checkov | 3.0.34-r1 | — |
| Wolfi rolling | confluent-docker-utils | 0.0.76-r0 | — |
| Wolfi rolling | dask-gateway +1 | 2024.1.0-r4 | — |
| Wolfi rolling | ggshield | 1.27.0-r0 | — |
| Wolfi rolling | jwt-tool | 2.2.7-r0 | — |
| Wolfi rolling | k8s-sidecar | 1.26.1-r1 | — |
| Wolfi rolling | kserve +9 | 0.13.1-r3 | — |
| Wolfi rolling | kubeflow-jupyter-web-app +1 | 1.8.0-r6 | — |
| Wolfi rolling | kubeflow-katib +17 | 0.18.0-r0 | — |
| Wolfi rolling | kubeflow-pipelines +11 | 2.1.0-r0 | — |
| Wolfi rolling | kubeflow-pipelines-visualization-server | 2.2.0-r0 | — |
| Wolfi rolling | py3-cassandra-medusa +1 | 0.23.0-r30 | — |
| Wolfi rolling | py3-idna | 3.7-r0 | — |
| Wolfi rolling | py3-pipenv +9 | 2024.4.1-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
redhat-tssc-tmm/CVE-2024-3651-exploit ★ 0 · Sep 25, 2026
Simple app to demonstrate CVE-2024-3651
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | idna | < 3.7 | 3.7 | GHSA-jjg7-2v4v-x38h |
| PyPI | idna | >= 0.1, < 3.7 | 3.7 | PYSEC-2024-60 |
Advisories 44
- RHSA-2024:3543 Red Hat Security Advisory: python-idna security and bug fix update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2026-3046 IBM Concert: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- WID-SEC-2024-1269 Red Hat Enterprise Linux (python-idna): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 10, 2026
- ALSA-2024:3846 Moderate: python-idna security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3466 Important: python39:3.9 and python39-devel:3.9 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4260 Moderate: python-idna security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2024-1328 Red Hat Ansible Automation Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2024:3781 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- openSUSE-SU-2026:11711-1 python313-idna-3.19-1.1 on GA media SUSE / openSUSE Security Updates · Sep 8, 2026
- RHSA-2024:3466 Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2024:8365 Red Hat Security Advisory: python-idna security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:4260 Red Hat Security Advisory: python-idna security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:3846 Red Hat Security Advisory: python-idna security update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- RHSA-2024:3552 Red Hat Security Advisory: python-idna security and bug fix update Red Hat Security Advisories (RHSA) · Aug 13, 2026
- SUSE-EL-9-CLIENT-TOOLS-2024-4029 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Jul 24, 2026
- WID-SEC-2025-0647 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
- WID-SEC-2024-3054 Splunk Add-on for Amazon Web Services: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2026
- USN-6780-1 python-idna vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2026-1701 Checkmk Windows-Agent-Plugins: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 27, 2026
- USN-7762-1 python-pip vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DLA-3811-1 python-idna - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2024:1439-1 Security update for python-idna SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4020-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4029-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1428-1 Security update for python-idna SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1939-1 Security update for python-idna SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1439-2 Security update for python-idna SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13874-1 python310-idna-3.7-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4021-1 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2024:3846 Moderate: python-idna security update Rocky Linux Security Advisories · Oct 9, 2025
- WID-SEC-2025-0225 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 1, 2025
- WID-SEC-2025-0794 Juniper Junos Space: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 4, 2025
- RLSA-2024:4260 Moderate: python-idna security update Rocky Linux Security Advisories · May 7, 2025
- WID-SEC-2024-3317 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 17, 2025
- ALAS2-2024-2699 Moderate: python3-idna security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Nov 15, 2024
- ALAS2023-2024-762 Moderate: python3.11-pip security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 14, 2024
- ALAS2023-2024-763 Moderate: python-idna security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 14, 2024
- ALAS2023-2024-764 Moderate: python-pip security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 14, 2024
- ELSA-2024-8365 Moderate: python-idna security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 7, 2024
- ALAS2-2024-2679 Moderate: python-pip security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 31, 2024
- ALAS2-2024-2680 Moderate: python-idna security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 31, 2024
- ELSA-2024-4260 Moderate: python-idna security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 3, 2024
- ELSA-2024-3846 Moderate: python-idna security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 13, 2024
- ELSA-2024-3466 Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 31, 2024