CVE-2024-3651
Aliases:GHSA-jjg7-2v4v-x38hPYSEC-2024-60RHSA-2024:3543RHSA-2024:3552RHSA-2024:3846RHSA-2024:4260RHSA-2024:8365DEBIAN-CVE-2024-3651ALPINE-CVE-2024-3651CGA-239r-x3w2-2jq6CGA-27r5-wpwp-fjr9CGA-2h3f-qpvf-x7v2CGA-2qfw-p4fh-p7hfCGA-32jf-x35h-whghCGA-3479-vx6w-3r9cCGA-39r4-8j2m-8q35CGA-3c4p-hx7w-56p9CGA-3mq3-c95c-56j8CGA-3p3p-pgpv-qvprCGA-3pp5-78w4-8p5vCGA-3qvm-fr54-j9w9CGA-452v-9mxg-3f7jCGA-45pj-pj2c-5x54CGA-484q-xhm7-vcjrCGA-4cgf-jfmr-h8r4CGA-4fc2-j98v-qh47CGA-4w3m-435w-vp4qCGA-588q-x55x-55m6CGA-5fqh-qm49-ccphCGA-5qj8-rj2g-8mfgCGA-5w3x-xhx9-rf95CGA-63h5-rm73-2266CGA-65hp-whm8-3f33CGA-66wx-6g2j-gxj8CGA-6v4w-qvhh-2q7mCGA-6x7v-5q8q-67xfCGA-6xr3-9gxv-9xm4CGA-75gj-m52v-v65cCGA-7924-2398-666hCGA-7937-w28v-4377CGA-79rc-8hcw-5693CGA-7hwq-gfp2-7jm2CGA-7mjv-jf3v-ch44CGA-7r62-2534-fp7xCGA-7rfg-8jhq-ch6pCGA-7vp6-xpww-m969CGA-7wwp-9rxq-7722CGA-8523-9p2h-7h45CGA-89mj-jx4h-5v46CGA-8cv9-hr2g-xq9cCGA-8v39-x363-g9xcCGA-8x54-gp6m-8frvCGA-9qwf-7fm2-r564CGA-9v7j-6h47-74j7CGA-9wmv-mhc3-qg6xCGA-9wrh-v285-58q8CGA-c2r6-4q6q-hr25CGA-c5v9-qv9j-pf59CGA-cc95-qmgm-w365CGA-cjg6-q79w-2wx9CGA-cjg9-cqfx-85qmCGA-cjj6-49px-f6q4CGA-cq69-4j6w-m48pCGA-cr8m-m922-9vfwCGA-f2jr-2fxp-9pj6CGA-fcqx-38q2-vhgqCGA-fgp8-6234-v29gCGA-fr9v-9xcr-5rvcCGA-fxcg-99qm-jf4vCGA-g26c-fw4m-8495CGA-g2h2-5346-94gfCGA-g3fm-654f-c34jCGA-g9qm-hqpm-39mqCGA-gqjq-hvj5-wv88CGA-h2w8-pgxp-gvxfCGA-h394-8946-26f3CGA-h9mr-87pr-26hfCGA-h9qm-9w22-gwj8CGA-hc78-f8hv-9vw9CGA-hf22-pw36-586pCGA-hqrq-gjjm-3cq7CGA-hr5g-jvjf-wfjmCGA-j648-fqh2-445vCGA-j86w-662m-7qqrCGA-j8w2-9g65-3gqpCGA-jhq9-qj86-9727CGA-jx6p-8c2m-q5pvCGA-m683-4v59-gv37CGA-m922-v66p-3xj6CGA-m98v-c9rg-ghwrCGA-mfrm-rqm7-h63hCGA-mmmw-h8hf-jwx5CGA-mmp9-65mh-3vpwCGA-mp8j-v6q6-9ffjCGA-mq8g-9v77-qq33CGA-mr89-rgx3-gh6xCGA-p2pc-mc43-w7wjCGA-p2r2-qm6r-48p7CGA-p7q7-qprf-6267CGA-p7xm-6743-4qqxCGA-pf5p-57xw-wg97CGA-pfp7-g55c-wqvfCGA-pgrx-32cw-p87mCGA-pm6f-xj9f-wm2hCGA-px5g-r7vr-hj37CGA-px8p-4h6p-5f72CGA-pxp8-83j2-gprqCGA-2j6r-xwc6-2rqmCGA-3v72-5mhw-v6cwCGA-5m7r-6j7x-r9gvCGA-834x-8mx7-phj6CGA-9493-rrq5-f8mxCGA-ff83-7cwm-cqvcCGA-jr4r-qfqp-m2qqCGA-jwpj-8qj8-23xjCGA-mrvg-wq74-wgccCGA-pf2f-57f5-jfcrCGA-q35q-3x5p-h9xmCGA-q45v-jhwp-57mrCGA-qj2j-mm5r-7f5xCGA-qw4m-9f25-47rvCGA-qw98-gxh6-5vc4CGA-qxg3-h68f-c23cCGA-r228-j279-qmqpCGA-rggp-4h59-hgqwCGA-rgv2-2v43-32p7CGA-rj23-6rr5-p3ggCGA-rmhx-f9pp-2pr3CGA-v44p-24q6-84rcCGA-v568-7x6p-hqqjCGA-vc7g-gh7c-58hrCGA-vhqp-2xh8-mmhgCGA-vwjr-2fj8-8m68CGA-wm39-9rcf-7c84CGA-wmp8-33m9-2c9vCGA-wpp2-4p9w-hg6jCGA-wqgq-v6hm-xq27CGA-ww68-5f2g-qrp3CGA-x2q7-f6cf-p2xhCGA-x352-2cm2-2hp9CGA-x497-h9m5-55vpCGA-x5vc-r3pm-8w8fCGA-x6xm-hwj7-vhqwCGA-x997-mf9g-c8whCGA-xj29-222h-fqh6CGA-xjvq-v5q7-qchhCGA-xr29-fqmg-8pf7CGA-xrhc-xrqr-364rCGA-xx2w-33f9-fh7wopenSUSE-SU-2026:11711-1
Advisory lineage Upstream: 0 Downstream: 23
Modified
Published: 07 Jul 2024, 17:22
Last modified:04 Nov 2025, 22:06
Vulnerability Summary
Overall Risk (default)
medium
40/100 CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
1.39% LOW
1% probability +0.72%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected
Timeline
07 Jul 2024, 17:22
Published
Vulnerability first disclosed
04 Nov 2025, 22:06
Last Modified
Vulnerability information updated
Description
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- v3.1•MEDIUM•Score: 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- v3.0•MEDIUM•Score: 6.2CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 1.39%• Percentile: 71%
Techniques & Countermeasures
- CWE-1333•Inefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Affected Systems
- alpine•py3-idna
< 3.7-r0 | < 3.7-r0 | < 3.7-r0 | < 3.7-r0 | < 3.7-r0 | < 3.7-r0
- chainguard•az
< 2.60.0-r0
- chainguard•az-iamguarded-compat
< 2.60.0-r0
- chainguard•checkov
< 3.0.34-r1
- chainguard•confluent-docker-utils
< 0.0.76-r0
- chainguard•dask-gateway
< 2024.1.0-r4
- chainguard•dask-gateway-server
< 2024.1.0-r4
- chainguard•ggshield
< 1.27.0-r0
- chainguard•graalvm-24-graalpy-venv
all
- chainguard•jwt-tool
< 2.2.7-r0
- chainguard•k8s-sidecar
< 1.26.1-r1
- chainguard•k8s-sidecar-1.22
< 1.22.4-r2
- chainguard•katib-controller
< 0.18.0-r0
- chainguard•katib-controller-compat
< 0.18.0-r0
- chainguard•katib-db-manager
< 0.18.0-r0
- chainguard•katib-db-manager-compat
< 0.18.0-r0
- chainguard•katib-earlystopping
< 0.18.0-r0
- chainguard•katib-file-metricscollector
< 0.18.0-r0
- chainguard•katib-file-metricscollector-compat
< 0.18.0-r0
- chainguard•katib-suggestion-goptuna
< 0.18.0-r0
- chainguard•katib-suggestion-goptuna-compat
< 0.18.0-r0
- chainguard•katib-suggestion-hyperband
< 0.18.0-r0
- chainguard•katib-suggestion-hyperopt
< 0.18.0-r0
- chainguard•katib-suggestion-nas-darts
< 0.18.0-r0
- chainguard•katib-suggestion-nas-enas
< 0.18.0-r0
- chainguard•katib-suggestion-optuna-enas
< 0.18.0-r0
- chainguard•katib-suggestion-pbt-enas
< 0.18.0-r0
- chainguard•katib-suggestion-skopt-enas
< 0.18.0-r0
- chainguard•katib-tfevent-metricscollector
< 0.18.0-r0
- chainguard•kserve
< 0.13.1-r3
- chainguard•kserve-agent
< 0.13.1-r3
- chainguard•kserve-agent-compat
< 0.13.1-r3
- chainguard•kserve-manager
< 0.13.1-r3
- chainguard•kserve-manager-compat
< 0.13.1-r3
- chainguard•kserve-qpext
< 0.13.1-r3
- chainguard•kserve-qpext-compat
< 0.13.1-r3
- chainguard•kserve-router
< 0.13.1-r3
- chainguard•kserve-router-compat
< 0.13.1-r3
- chainguard•kserve-storage-controller
< 0.13.1-r3
- chainguard•kubeflow-jupyter-web-app
< 1.8.0-r6
- chainguard•kubeflow-katib
< 0.18.0-r0
- chainguard•kubeflow-pipelines
< 2.1.0-r0
- chainguard•kubeflow-pipelines-apiserver
< 2.1.0-r0
- chainguard•kubeflow-pipelines-cache_server
< 2.1.0-r0
- chainguard•kubeflow-pipelines-cache-deployer
< 2.1.0-r0
- chainguard•kubeflow-pipelines-cache-deployer-compat
< 2.1.0-r0
- chainguard•kubeflow-pipelines-frontend
< 2.1.0-r0
- chainguard•kubeflow-pipelines-metadata-envoy-config
< 2.1.0-r0
- chainguard•kubeflow-pipelines-metadata-writer
< 2.1.0-r0
- chainguard•kubeflow-pipelines-metadata-writer-compat
< 2.1.0-r0
Showing first 50 affected entries in server-rendered view.
References (34)
- https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb
- https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d
- https://lists.debian.org/debian-lts-announce/2024/05/msg00006.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2S5E23N6E52S46KGNYTDFB75LOC4N4D/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5IDLLD2IKSIVRBSLB34WTSYGLMWUFWF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULSC7HBJKXB3BZV367WM5BR6DFEC4Z43/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YQUPYH3SVZ5GFF2CDQ55FCM575AZTF2/
- https://github.com/kjd/idna/security/advisories/GHSA-jjg7-2v4v-x38h
- https://nvd.nist.gov/vuln/detail/CVE-2024-3651
- https://github.com/kjd/idna
- https://github.com/pypa/advisory-database/tree/main/vulns/idna/PYSEC-2024-60.yaml
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YQUPYH3SVZ5GFF2CDQ55FCM575AZTF2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2S5E23N6E52S46KGNYTDFB75LOC4N4D
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5IDLLD2IKSIVRBSLB34WTSYGLMWUFWF
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULSC7HBJKXB3BZV367WM5BR6DFEC4Z43
- https://github.com/advisories/GHSA-jjg7-2v4v-x38h
- https://access.redhat.com/errata/RHSA-2024:3543
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2274779
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3543.json
- https://access.redhat.com/security/cve/CVE-2024-3651
- https://www.cve.org/CVERecord?id=CVE-2024-3651
- https://access.redhat.com/errata/RHSA-2024:3552
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3552.json
- https://access.redhat.com/errata/RHSA-2024:3846
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3846.json
- https://access.redhat.com/errata/RHSA-2024:4260
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4260.json
- https://access.redhat.com/errata/RHSA-2024:8365
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8365.json
- https://security-tracker.debian.org/tracker/CVE-2024-3651
- https://security.alpinelinux.org/vuln/CVE-2024-3651
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3651.json
- https://www.suse.com/security/cve/CVE-2024-3651