CVE-2024-6232: Regular-expression DoS when parsing TarFile headers

Modified

AliasesALPINE-CVE-2024-6232SUSE-SU-2024:3430-1SUSE-SU-2024:3447-1+29 more

Published 03-09-2024Last modified 03-11-2025

Vulnerability summary

CVE-2024-6232 is a high (CVSS 7.5) vulnerability in python software foundation cpython. EPSS estimates a 2.20% chance of exploitation in the next 30 days, higher than 82.5% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

2.20%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1github

Timeline

03-09-2024
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

CVSS metrics

8 scores · 8 sources · 1 version

v3.17.5

EPSS trend

Probability

2.20%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.20% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

githubUnverified
Cpython
Maturity: poc

Weaknesses

CWE · root cause

CWE-1333Inefficient Regular Expression ComplexityThe product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat131 products

Cython< 0:0.29.21-5.module+el8.9.0+19644+d68f775d
Cython-debugsource< 0:0.29.21-5.module+el8.9.0+19644+d68f775d
mod_wsgi< 0:4.7.1-7.module+el8.9.0+19644+d68f775d | < 0:4.7.1-5.module+el8.7.0+16654+645aad7f | < 0:4.7.1-4.module+el8.4.0+9822+20bf1249
numpy< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423
numpy-debugsource< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423

pybind11< 0:2.7.1-1.module+el8.9.0+19644+d68f775d
pytest< 0:6.0.2-2.module+el8.9.0+19644+d68f775d
python-attrs< 0:20.3.0-2.module+el8.9.0+19644+d68f775d
python-cffi< 0:1.14.3-2.module+el8.9.0+19644+d68f775d | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-cffi-debugsource< 0:1.14.3-2.module+el8.9.0+19644+d68f775d | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-chardet< 0:3.0.4-19.module+el8.9.0+19644+d68f775d | < 0:3.0.4-19.module+el8.4.0+9822+20bf1249
python-cryptography< 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-cryptography-debugsource< 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-idna< 0:2.10-4.module+el8.10.0+21815+bb024982 | < 0:2.10-3.module+el8.4.0+9822+20bf1249
python-iniconfig< 0:1.1.1-2.module+el8.9.0+19644+d68f775d
python-lxml< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.9.0+19644+d68f775d | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python-lxml-debugsource< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.9.0+19644+d68f775d | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python-more-itertools< 0:8.5.0-2.module+el8.9.0+19644+d68f775d
python-packaging< 0:20.4-4.module+el8.9.0+19644+d68f775d
python-pluggy< 0:0.13.1-3.module+el8.9.0+19644+d68f775d
python-ply< 0:3.11-10.module+el8.9.0+19644+d68f775d | < 0:3.11-10.module+el8.4.0+9822+20bf1249
python-psutil< 0:5.8.0-4.module+el8.9.0+19644+d68f775d | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psutil-debugsource< 0:5.8.0-4.module+el8.9.0+19644+d68f775d | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psycopg2< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python-psycopg2-debugsource< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python-py< 0:1.10.0-1.module+el8.9.0+19644+d68f775d
python-pycparser< 0:2.20-3.module+el8.9.0+19644+d68f775d | < 0:2.20-3.module+el8.4.0+9822+20bf1249
python-PyMySQL< 0:0.10.1-2.module+el8.9.0+19644+d68f775d | < 0:0.10.1-2.module+el8.4.0+9822+20bf1249
python-pysocks< 0:1.7.1-4.module+el8.9.0+19644+d68f775d | < 0:1.7.1-4.module+el8.4.0+9822+20bf1249
python-requests< 0:2.25.0-3.module+el8.9.0+19644+d68f775d | < 0:2.25.0-2.module+el8.4.0+9822+20bf1249
python-toml< 0:0.10.1-5.module+el8.9.0+19644+d68f775d | < 0:0.10.1-5.module+el8.4.0+9822+20bf1249
python-unversioned-command< 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.18-3.el9_4.6
python-urllib3< 0:1.25.10-3.module+el8.4.0+9822+20bf1249 | < 0:1.25.10-5.module+el8.10.0+20443+f0a692fe | < 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
python-wcwidth< 0:0.2.5-3.module+el8.9.0+19644+d68f775d
python-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.9.0+19644+d68f775d | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python3< 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-debug< 0:3.9.19-8.el9_5.1 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-debuginfo< 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-devel< 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-idle< 0:3.9.19-8.el9_5.1 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-libs< 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-test< 0:3.9.19-8.el9_5.1 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3-tkinter< 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.18-3.el9_4.6 | < 0:3.6.8-10.el7_7.1 | < 0:3.6.8-21.el7_9.1
python3.11< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-debug< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-debuginfo< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-debugsource< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-devel< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-idle< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-libs< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-rpm-macros< 0:3.11.2-2.el8_8.4 | < 0:3.11.10-1.el8_10
python3.11-test< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.11-tkinter< 0:3.11.9-7.el9_5.1 | < 0:3.11.2-2.el8_8.4 | < 0:3.11.7-1.el9_4.6 | < 0:3.11.10-1.el8_10
python3.12< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-debug< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-debuginfo< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-debugsource< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-devel< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-idle< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-libs< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-rpm-macros< 0:3.12.6-1.el8_10
python3.12-test< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python3.12-tkinter< 0:3.12.5-2.el9_5.1 | < 0:3.12.1-4.el9_4.4 | < 0:3.12.6-1.el8_10
python39< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.18-3.el9_4.6 | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-attrs< 0:20.3.0-2.module+el8.9.0+19644+d68f775d
python39-cffi< 0:1.14.3-2.module+el8.9.0+19644+d68f775d | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python39-cffi-debuginfo< 0:1.14.3-2.module+el8.9.0+19644+d68f775d | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python39-chardet< 0:3.0.4-19.module+el8.9.0+19644+d68f775d | < 0:3.0.4-19.module+el8.4.0+9822+20bf1249
python39-cryptography< 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python39-cryptography-debuginfo< 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python39-Cython< 0:0.29.21-5.module+el8.9.0+19644+d68f775d
python39-Cython-debuginfo< 0:0.29.21-5.module+el8.9.0+19644+d68f775d
python39-debug< 0:3.9.20-1.module+el8.10.0+22342+478c159e
python39-debuginfo< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.18-3.el9_4.6 | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-debugsource< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.19-8.el9_5.1 | < 0:3.9.10-4.el9_0.6 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.18-3.el9_4.6 | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-devel< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-idle< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-idna< 0:2.10-4.module+el8.10.0+21815+bb024982 | < 0:2.10-3.module+el8.4.0+9822+20bf1249
python39-iniconfig< 0:1.1.1-2.module+el8.9.0+19644+d68f775d
python39-libs< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-lxml< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.9.0+19644+d68f775d | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python39-lxml-debuginfo< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.9.0+19644+d68f775d | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python39-mod_wsgi< 0:4.7.1-7.module+el8.9.0+19644+d68f775d | < 0:4.7.1-5.module+el8.7.0+16654+645aad7f | < 0:4.7.1-4.module+el8.4.0+9822+20bf1249
python39-more-itertools< 0:8.5.0-2.module+el8.9.0+19644+d68f775d
python39-numpy< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-debuginfo< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-doc< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-f2py< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.9.0+19644+d68f775d | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-packaging< 0:20.4-4.module+el8.9.0+19644+d68f775d
python39-pip< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-9.module+el8.10.0+21329+8d76b841 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python39-pip-wheel< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-9.module+el8.10.0+21329+8d76b841 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python39-pluggy< 0:0.13.1-3.module+el8.9.0+19644+d68f775d
python39-ply< 0:3.11-10.module+el8.9.0+19644+d68f775d | < 0:3.11-10.module+el8.4.0+9822+20bf1249
python39-psutil< 0:5.8.0-4.module+el8.9.0+19644+d68f775d | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python39-psutil-debuginfo< 0:5.8.0-4.module+el8.9.0+19644+d68f775d | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python39-psycopg2< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-debuginfo< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-doc< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-tests< 0:2.8.6-3.module+el8.10.0+21142+453d2b75 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-py< 0:1.10.0-1.module+el8.9.0+19644+d68f775d
python39-pybind11< 0:2.7.1-1.module+el8.9.0+19644+d68f775d
python39-pybind11-devel< 0:2.7.1-1.module+el8.9.0+19644+d68f775d
python39-pycparser< 0:2.20-3.module+el8.9.0+19644+d68f775d | < 0:2.20-3.module+el8.4.0+9822+20bf1249
python39-PyMySQL< 0:0.10.1-2.module+el8.9.0+19644+d68f775d | < 0:0.10.1-2.module+el8.4.0+9822+20bf1249
python39-pyparsing< 0:2.4.7-5.module+el8.9.0+19644+d68f775d
python39-pysocks< 0:1.7.1-4.module+el8.9.0+19644+d68f775d | < 0:1.7.1-4.module+el8.4.0+9822+20bf1249
python39-pytest< 0:6.0.2-2.module+el8.9.0+19644+d68f775d
python39-pyyaml< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.9.0+19644+d68f775d | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
python39-pyyaml-debuginfo< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.9.0+19644+d68f775d | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
python39-requests< 0:2.25.0-3.module+el8.9.0+19644+d68f775d | < 0:2.25.0-2.module+el8.4.0+9822+20bf1249
python39-rpm-macros< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-scipy< 0:1.5.4-5.module+el8.9.0+19644+d68f775d | < 0:1.5.4-3.module+el8.4.0+9822+20bf1249
python39-scipy-debuginfo< 0:1.5.4-5.module+el8.9.0+19644+d68f775d | < 0:1.5.4-3.module+el8.4.0+9822+20bf1249
python39-setuptools< 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 | < 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 | < 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b | < 0:50.3.2-6.module+el8.6.0+22162+859a69ec
python39-setuptools-wheel< 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 | < 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 | < 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b | < 0:50.3.2-6.module+el8.6.0+22162+859a69ec
python39-six< 0:1.15.0-3.module+el8.9.0+19644+d68f775d | < 0:1.15.0-3.module+el8.4.0+9822+20bf1249
python39-test< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-tkinter< 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4 | < 0:3.9.20-1.module+el8.10.0+22342+478c159e | < 0:3.9.16-1.module+el8.8.0+22374+62aa8e74.4 | < 0:3.9.7-2.module+el8.6.0+22380+a90b5d28.4
python39-toml< 0:0.10.1-5.module+el8.9.0+19644+d68f775d | < 0:0.10.1-5.module+el8.4.0+9822+20bf1249
python39-urllib3< 0:1.25.10-3.module+el8.4.0+9822+20bf1249 | < 0:1.25.10-5.module+el8.10.0+20443+f0a692fe | < 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
python39-wcwidth< 0:0.2.5-3.module+el8.9.0+19644+d68f775d
python39-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.9.0+19644+d68f775d | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python39-wheel-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.9.0+19644+d68f775d | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python3x-pip< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-9.module+el8.10.0+21329+8d76b841 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python3x-pyparsing< 0:2.4.7-5.module+el8.9.0+19644+d68f775d
python3x-setuptools< 0:50.3.2-3.module+el8.4.0+22168+8a561f05.2 | < 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 | < 0:50.3.2-6.module+el8.8.0+22158+89b6fb7b | < 0:50.3.2-6.module+el8.6.0+22162+859a69ec
python3x-six< 0:1.15.0-3.module+el8.9.0+19644+d68f775d | < 0:1.15.0-3.module+el8.4.0+9822+20bf1249
PyYAML< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.9.0+19644+d68f775d | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
PyYAML-debugsource< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.9.0+19644+d68f775d | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
scipy< 0:1.5.4-5.module+el8.9.0+19644+d68f775d | < 0:1.5.4-3.module+el8.4.0+9822+20bf1249
scipy-debugsource< 0:1.5.4-5.module+el8.9.0+19644+d68f775d | < 0:1.5.4-3.module+el8.4.0+9822+20bf1249

Show all 131

Suse13 products

python3-core&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 3.6.15-150000.3.161.1
python3-core&distro=SUSE Linux Enterprise Micro 5.1< 3.6.15-150000.3.161.1
python3-core&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 3.6.15-150000.3.161.1
python3-core&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 3.6.15-150000.3.161.1
python36-core&distro=SUSE Linux Enterprise Server 12 SP5< 3.6.15-67.1

Show all 13

Ubuntu10 products

python2.7< 2.7.6-8ubuntu0.6+esm21 | < 2.7.12-1ubuntu0~16.04.18+esm12 | < 2.7.18-1~20.04.5 | < 2.7.18-13ubuntu1.3
python3.10< 3.10.12-1~22.04.6
python3.11< 3.11.0~rc1-1~22.04.1~esm2
python3.12< 3.12.3-1ubuntu0.2
python3.4< 3.4.3-1ubuntu1~14.04.7+esm14

Show all 10

Chainguard5 products

python-3.10< 3.10.15-r0
python-3.11< 3.11.9-r9
python-3.12< 3.12.5-r3
python-3.13< 3.13.2-r6
python-3.9< 3.9.20-r0

Wolfi4 products

python-3.10< 3.10.15-r0
python-3.11< 3.11.9-r9
python-3.12< 3.12.5-r3
python-3.13< 3.13.2-r6

Debian3 products

pypy3All versions (No fix recorded) | < 7.3.18+dfsg-1
python3.11< 3.11.2-6+deb12u4
python3.13< 3.13.0~rc2-1

Alpine1 product

python3< 3.10.15-r0 | < 3.11.10-r0 | < 3.12.6-r0

Opensuse1 product

python39&distro=openSUSE Tumbleweed< 3.9.19-8.1

Python1 product

python< 3.8.20 | ≥ 3.9.0, < 3.9.20 | ≥ 3.10.0, < 3.10.15 | ≥ 3.11.0, < 3.11.10 | ≥ 3.12.0, < 3.12.6 | 3.13.0:alpha0 | 3.13.0:alpha1 | 3.13.0:alpha2 | 3.13.0:alpha3 | 3.13.0:alpha4 | 3.13.0:alpha5 | 3.13.0:alpha6 | 3.13.0:beta1 | 3.13.0:beta2 | 3.13.0:beta3 | 3.13.0:beta4 | 3.13.0:rc1

Python software foundation1 product

cpython< 3.8.20 | ≥ 3.9.0, < 3.9.20 | ≥ 3.10.0, < 3.10.15 | ≥ 3.11.0, < 3.11.10 | ≥ 3.12.0, < 3.12.6 | ≥ 3.13.0a1, < 3.13.0rc2

10 vendors · 170 products

References

63 links

github.com/python/cpython/pull/121286PatchARTICLEREPORTFIXIssue Tracking
github.com/python/cpython/issues/121285Issue TrackingARTICLEREPORTExploitPatch
mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/Vendor AdvisoryARTICLEREPORTAdvisory
github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06PatchFIX
github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4PatchFIX
github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbfPatchFIX
github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373PatchFIX
github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64dPatchFIX
github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877PatchFIX
github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4PatchFIX

Show all 63 references

www.openwall.com/lists/oss-security/2024/09/03/5WEBMailing ListThird Party Advisory
security.netapp.com/advisory/ntap-20241018-0007/AdvisoryThird Party Advisory
lists.debian.org/debian-lts-announce/2024/12/msg00000.htmlWEB
security.alpinelinux.org/vuln/CVE-2024-6232Advisory
www.suse.com/support/update/announcement/2024/suse-su-20243430-1/Advisory
bugzilla.suse.com/1230227REPORT
www.suse.com/security/cve/CVE-2024-6232WEB
www.suse.com/support/update/announcement/2024/suse-su-20243447-1/Advisory
access.redhat.com/errata/RHSA-2024:7647Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2309426REPORT
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7647.jsonAdvisory
access.redhat.com/security/cve/CVE-2024-6232REPORT
www.cve.org/CVERecord?id=CVE-2024-6232AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2024-6232AdvisoryOval
access.redhat.com/errata/RHSA-2024:8130Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8130.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8359Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8359.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8374Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8374.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8446Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8446.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8447Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8447.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8490Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8490.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8504Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8504.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8797Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8797.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8836Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8836.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8838Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8838.jsonAdvisory
access.redhat.com/errata/RHSA-2024:8977Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8977.jsonAdvisory
access.redhat.com/errata/RHSA-2024:9450Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9450.jsonAdvisory
access.redhat.com/errata/RHSA-2024:9451Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9451.jsonAdvisory
access.redhat.com/errata/RHSA-2024:9468Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9468.jsonAdvisory
access.redhat.com/errata/RHSA-2025:1750Advisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1750.jsonAdvisory
ubuntu.com/security/CVE-2024-6232REPORT
ubuntu.com/security/notices/USN-7015-1Advisory
ubuntu.com/security/notices/USN-7015-2Advisory
ubuntu.com/security/notices/USN-7015-5Advisory
ubuntu.com/security/notices/USN-7488-1Advisory
security-tracker.debian.org/tracker/CVE-2024-6232Advisory
github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6232.jsonAdvisory
github.com/python/cpythonPACKAGE