CVE-2024-6345: Remote Code Execution in pypa/setuptools

Deferred

AliasesALPINE-CVE-2024-6345MGASA-2025-0056SUSE-SU-2024:2899-1+135 more

Published 15-07-2024Last modified 04-11-2025

Vulnerability summary

CVE-2024-6345 is a high (CVSS 8.8) Improper Control of Generation of Code vulnerability in pypa pypa/setuptools. EPSS estimates a 1.94% chance of exploitation in the next 30 days, higher than 80.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 8.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.8/10

010

High · v3.0 (CVE.org)

EPSS score

1.94%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

15-07-2024
PublishedVulnerability first disclosed.
04-11-2025
Last modifiedVulnerability information updated.

Description

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

CVSS metrics

10 scores · 9 sources · 3 versions

v4.07.5v3.18.8v3.08.8

EPSS trend

Probability

1.94%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.94% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of CodeThe product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat93 products

Cython< 0:0.29.21-5.module+el8.4.0+9822+20bf1249
Cython-debugsource< 0:0.29.21-5.module+el8.4.0+9822+20bf1249
fence-agents< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-aliyun< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-aliyun-debuginfo< 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14

fence-agents-all< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-amt-ws< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-apc< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-apc-snmp< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-aws< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-azure-arm< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-bladecenter< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-brocade< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-cisco-mds< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-cisco-ucs< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-common< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-compute< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-debugsource< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-drac5< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-eaton-snmp< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-emerson< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-eps< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-gce< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-heuristics-ping< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-hpblade< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ibm-powervs< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ibm-vpc< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ibmblade< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ifmib< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ilo-moonshot< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ilo-mp< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ilo-ssh< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ilo2< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-intelmodular< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ipdu< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-ipmilan< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-kdump< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-kdump-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-kubevirt< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-kubevirt-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-lpar< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-mpath< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-openstack< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8
fence-agents-redfish< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-rhevm< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-rsa< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-rsb< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-sbd< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-scsi< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-virsh< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-vmware-rest< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-vmware-soap< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-wti< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-65.el8_4.20 | < 0:4.2.1-89.el8_6.14
fence-agents-zvm< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5 | < 0:4.2.1-112.el8_8.8 | < 0:4.2.1-89.el8_6.14
fence-virt< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virt-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-cpg< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-cpg-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-libvirt< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-libvirt-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-multicast< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-multicast-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-serial< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-serial-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-tcp< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
fence-virtd-tcp-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
ha-cloud-support< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
ha-cloud-support-debuginfo< 0:4.10.0-43.el9_2.9 | < 0:4.10.0-20.el9_0.17 | < 0:4.10.0-62.el9_4.5
ha-openstack-support< 0:4.10.0-20.el9_0.17
ha-openstack-support-debuginfo< 0:4.10.0-20.el9_0.17
mod_wsgi< 0:4.7.1-5.module+el8.7.0+16654+645aad7f | < 0:4.7.1-4.module+el8.4.0+9822+20bf1249
numpy< 0:1.19.4-3.module+el8.5.0+12204+54860423 | < 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1
numpy-debugsource< 0:1.19.4-3.module+el8.5.0+12204+54860423 | < 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1
platform-python-setuptools< 0:39.2.0-7.el8_8.1 | < 0:39.2.0-7.el8_6.1 | < 0:39.2.0-6.el8_4.1 | < 0:39.2.0-8.el8_10 | < 0:39.2.0-5.el8_2.1
pybind11< 0:2.7.1-1.module+el8.6.0+12838+640e6226
pytest< 0:6.0.2-2.module+el8.4.0+9822+20bf1249
python-attrs< 0:20.3.0-2.module+el8.4.0+9822+20bf1249
python-cffi< 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-cffi-debugsource< 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-chardet< 0:3.0.4-19.module+el8.4.0+9822+20bf1249
python-cryptography< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-cryptography-debugsource< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-idna< 0:2.10-3.module+el8.4.0+9822+20bf1249
python-iniconfig< 0:1.1.1-2.module+el8.4.0+9822+20bf1249
python-lxml< 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c | < 0:4.6.2-2.module+el8.4.0+9822+20bf1249
python-lxml-debugsource< 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c | < 0:4.6.2-2.module+el8.4.0+9822+20bf1249
python-more-itertools< 0:8.5.0-2.module+el8.4.0+9822+20bf1249
python-packaging< 0:20.4-4.module+el8.4.0+9822+20bf1249
python-pluggy< 0:0.13.1-3.module+el8.4.0+9822+20bf1249
python-ply< 0:3.11-10.module+el8.4.0+9822+20bf1249

Show all 93

Chainguard46 products

airflow< 2.9.3-r1
airflow-bitnami-compat< 2.9.3-r1
az< 2.62.0-r1
az-iamguarded-compat< 2.62.0-r1
checkov< 3.0.34-r1

Show all 46

Wolfi37 products

airflow< 2.9.3-r1
airflow-bitnami-compat< 2.9.3-r1
az< 2.62.0-r1
az-iamguarded-compat< 2.62.0-r1
checkov< 3.0.34-r1

Show all 37

Opensuse16 products

python-setuptools-wheel&distro=openSUSE Leap 15.6< 67.7.2-150400.3.16.1
python-setuptools&distro=openSUSE Leap 15.5< 67.7.2-150400.3.16.1
python-setuptools&distro=openSUSE Leap 15.6< 67.7.2-150400.3.16.1
python-setuptools&distro=openSUSE Tumbleweed< 72.1.0-1.1
python3-setuptools-test&distro=openSUSE Leap 15.5< 44.1.1-150400.9.9.1

Show all 16

Ubuntu3 products

python-pip< 1.5.4-1ubuntu4+esm5 | < 8.1.1-2ubuntu0.6+esm8 | < 9.0.1-2.3~ubuntu1.18.04.8+esm4 | < 20.0.2-5ubuntu1.10+esm2
python-setuptools< 3.3-1ubuntu2+esm2 | < 20.7.0-1ubuntu0.1~esm2 | < 39.0.1-2ubuntu0.1+esm1 | < 44.0.0-2ubuntu0.1+esm1 | < 44.1.1-1.2ubuntu0.22.04.1+esm1
setuptools< 45.2.0-1ubuntu0.2 | < 59.6.0-1.2ubuntu0.22.04.2 | < 68.1.2-2ubuntu1.1

Alpine1 product

py3-setuptools< 70.3.0-r0

Debian1 product

setuptools< 66.1.1-1+deb12u1 | < 70.3.0-2

Mageia1 product

python-setuptools< 65.5.0-3.1.mga9

Pypa1 product

pypa/setuptools≥ unspecified, < 70.0

PyPI1 product

setuptools< 70.0.0

10 vendors · 200 products · Showing 200 of 363

References

87 links

huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5WEBARTICLEREPORT
github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0WEBARTICLEREPORTFIX
lists.debian.org/debian-lts-announce/2024/09/msg00018.htmlWEB
security.alpinelinux.org/vuln/CVE-2024-6345Advisory
advisories.mageia.org/MGASA-2025-0056.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=33536REPORT
lists.suse.com/pipermail/sle-updates/2024-August/036709.htmlWEB
www.suse.com/support/update/announcement/2024/suse-su-20242899-1/Advisory
bugzilla.suse.com/1228105REPORT
www.suse.com/security/cve/CVE-2024-6345WEB

Show all 87 references