CVE-2024-8088
NoneCVSS
—
EPSS
1.3%
Published
Aug 22, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in Python's zip handling can let a specially made zip file freeze programs that read it, potentially stopping services until they are restarted.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Maliciously crafted zip archives trigger an infinite loop in zipfile.Path iteration methods such as namelist() and iterdir() during metadata reads or extraction, causing a denial-of-service condition while leaving zipfile.ZipFile unaffected.
Why it matters to the business
Applications or services that accept or process user-supplied zip archives can be hung or crashed, leading to service outages, resource exhaustion, and operational disruption until the process is restarted.
How an attack unfolds
An attacker creates a zip archive with specially constructed entry names that cause the Path iteration logic to loop indefinitely, then supplies the archive to a vulnerable application or service that uses zipfile.Path to list or extract contents.
How to fix it
Upgrade CPython to a build containing commit 0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1 or later; rebuild and redeploy affected applications; avoid processing untrusted zip archives with zipfile.Path until patched.
How to confirm the fix worked
Confirm the installed Python interpreter reports a version or commit after 0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1; test that iteration over a known-malicious test archive completes without hanging; monitor process resource usage during zip handling.
Typical attack path
- Craft zip archive containing entry metadata that triggers infinite iteration in Path handling
- Deliver the archive to a target application or service via upload, download, or file processing
- Trigger zipfile.Path methods such as namelist() or iterdir() on the archive
- Observe process hang or high CPU consumption resulting in denial of service
How to detect it
Search application and system logs for repeated or stalled zipfile operations, unexpected high CPU or memory usage on processes handling zip archives, and any entries indicating infinite loops or hung threads during Path iteration.
What your security team should do
- Prioritize patching CPython installations that expose zipfile.Path to untrusted input
- Implement input validation or sandboxing around zip processing code paths
- Update dependency manifests and CI pipelines to enforce the fixed commit or newer Python releases
- Review logging and monitoring to detect anomalous CPU or memory usage during archive handling
The record
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | python3.11 | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-debug | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-devel | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-idle | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-libs | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-rpm-macros | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-test | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.11-tkinter | 0 | 3.11.9-7.el8_10 |
| AlmaLinux:8 | python3.12 | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-debug | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-devel | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-idle | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-libs | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-rpm-macros | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-test | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python3.12-tkinter | 0 | 3.12.5-2.el8_10 |
| AlmaLinux:8 | python39 | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-Cython | 0 | 0.29.21-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-Cython | 0 | 0.29.21-5.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-PyMySQL | 0 | 0.10.1-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-attrs | 0 | 20.3.0-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cffi | 0 | 1.14.3-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cffi | 0 | 1.14.3-2.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-chardet | 0 | 3.0.4-19.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-cryptography | 0 | 3.3.1-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-debug | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-devel | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-idle | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-idna | 0 | 2.10-4.module_el8.10.0+3849+a48d89aa |
| AlmaLinux:8 | python39-iniconfig | 0 | 1.1.1-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-libs | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-lxml | 0 | 4.6.5-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-lxml | 0 | 4.6.5-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-mod_wsgi | 0 | 4.7.1-7.module_el8.9.0+3634+fb2a896c |
| AlmaLinux:8 | python39-more-itertools | 0 | 8.5.0-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy | 0 | 1.19.4-3.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-numpy-doc | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy-f2py | 0 | 1.19.4-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-numpy-f2py | 0 | 1.19.4-3.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-packaging | 0 | 20.4-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pip | 0 | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-pip-wheel | 0 | 20.2.4-9.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-pluggy | 0 | 0.13.1-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-ply | 0 | 3.11-10.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-psutil | 0 | 5.8.0-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-psutil | 0 | 5.8.0-4.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-psycopg2 | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-psycopg2-doc | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-psycopg2-tests | 0 | 2.8.6-3.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-py | 0 | 1.10.0-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11 | 0 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11 | 0 | 2.7.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-pybind11-devel | 0 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pybind11-devel | 0 | 2.7.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-pycparser | 0 | 2.20-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyparsing | 0 | 2.4.7-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pysocks | 0 | 1.7.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pytest | 0 | 6.0.2-2.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyyaml | 0 | 5.4.1-1.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-pyyaml | 0 | 5.4.1-1.module_el8.6.0+3248+c431e88c |
| AlmaLinux:8 | python39-requests | 0 | 2.25.0-3.module_el8.9.0+3634+fb2a896c |
| AlmaLinux:8 | python39-rpm-macros | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-scipy | 0 | 1.5.4-5.module_el8.9.0+3634+fb2a896c |
| AlmaLinux:8 | python39-setuptools | 0 | 50.3.2-6.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-setuptools-wheel | 0 | 50.3.2-6.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-six | 0 | 1.15.0-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-test | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-tkinter | 0 | 3.9.19-7.module_el8.10.0+3885+d986a391 |
| AlmaLinux:8 | python39-toml | 0 | 0.10.1-5.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-urllib3 | 0 | 1.25.10-5.module_el8.10.0+3765+2f9a457d |
| AlmaLinux:8 | python39-wcwidth | 0 | 0.2.5-3.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-wheel | 0 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:8 | python39-wheel-wheel | 0 | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 |
| AlmaLinux:9 | python-unversioned-command | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3 | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-debug | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-devel | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-idle | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-libs | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-test | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3-tkinter | 0 | 3.9.19-8.el9 |
| AlmaLinux:9 | python3.11 | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-debug | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-devel | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-idle | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-libs | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-test | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.11-tkinter | 0 | 3.11.9-7.el9 |
| AlmaLinux:9 | python3.12 | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-debug | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-devel | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-idle | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-libs | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-test | 0 | 3.12.5-2.el9 |
| AlmaLinux:9 | python3.12-tkinter | 0 | 3.12.5-2.el9 |
| Alpine:v3.17 | python3 | 0 | 3.10.14-r2 |
| Alpine:v3.18 | python3 | 0 | 3.11.8-r1 |
| Alpine:v3.19 | python3 | 0 | 3.11.9-r1 |
| Alpine:v3.20 | python3 | 0 | 3.12.3-r2 |
| Alpine:v3.21 | python3 | 0 | 3.12.5-r1 |
| Alpine:v3.22 | python3 | 0 | 3.12.5-r1 |
| Bitnami | libpython | 0 | 3.8.20 |
| Bitnami | python | 0 | 3.13.0 |
| Bitnami | python | 0 | 3.8.20 |
| Bitnami | python | 3.12.0 | 3.12.6 |
| Bitnami | python-min | 0 | 3.8.20 |
| Chainguard | python-3.10 | 0 | 3.10.14-r6 |
| Chainguard | python-3.10-base | 0 | 3.10.14-r6 |
| Chainguard | python-3.10-base-dev | 0 | 3.10.14-r6 |
| Chainguard | python-3.10-dev | 0 | 3.10.14-r6 |
| Chainguard | python-3.10-doc | 0 | 3.10.14-r6 |
| Chainguard | python-3.11 | 0 | 3.11.9-r8 |
| Chainguard | python-3.11-base | 0 | 3.11.9-r8 |
| Chainguard | python-3.11-base-dev | 0 | 3.11.9-r8 |
| Chainguard | python-3.11-dev | 0 | 3.11.9-r8 |
| Chainguard | python-3.11-doc | 0 | 3.11.9-r8 |
| Chainguard | python-3.12 | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-base | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-base-dev | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-dev | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-doc | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-privileged-netbindservice | 0 | 3.12.5-r1 |
| Chainguard | python-3.12-tk | 0 | 3.12.5-r1 |
| Chainguard | python-3.8 | 0 | 3.8.19-r3 |
| Chainguard | python-3.8-base | 0 | 3.8.19-r3 |
| Chainguard | python-3.8-base-dev | 0 | 3.8.19-r3 |
| Chainguard | python-3.8-default | 0 | 3.8.19-r3 |
| Chainguard | python-3.8-dev | 0 | 3.8.19-r3 |
| Chainguard | python-3.8-doc | 0 | 3.8.19-r3 |
| Chainguard | python-3.9 | 0 | 3.9.20-r0 |
| Chainguard | python-3.9-base | 0 | 3.9.20-r0 |
| Chainguard | python-3.9-base-dev | 0 | 3.9.20-r0 |
| Chainguard | python-3.9-default | 0 | 3.9.20-r0 |
| Chainguard | python-3.9-dev | 0 | 3.9.20-r0 |
| Chainguard | python-3.9-doc | 0 | 3.9.20-r0 |
| Debian:11 | python2.7 | 0 | No fix |
| Debian:11 | python3.9 | 0 | No fix |
| Debian:11 | python3.9 | 0 | 3.9.2-1+deb11u2 |
| Debian:12 | pypy3 | 0 | No fix |
| Debian:12 | python3.11 | 0 | 3.11.2-6+deb12u3 |
| Debian:13 | pypy3 | 0 | 7.3.18+dfsg-1 |
| Debian:13 | python3.12 | 0 | 3.12.6-1 |
| Debian:13 | python3.13 | 0 | 3.13.0~rc2-1 |
| Debian:14 | pypy3 | 0 | 7.3.18+dfsg-1 |
| Debian:14 | python3.13 | 0 | 3.13.0~rc2-1 |
| Mageia:9 | python3 | 0 | 3.10.11-1.3.mga9 |
| Red Hat:enterprise_linux:8::appstream | PyYAML | 0 | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | PyYAML-debugsource | 0 | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | mod_wsgi | 0 | 0:4.7.1-7.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | numpy | 0 | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | numpy-debugsource | 0 | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-PyMySQL | 0 | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-cffi | 0 | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-cffi-debugsource | 0 | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-chardet | 0 | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-cryptography | 0 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat:enterprise_linux:8::appstream | python-cryptography-debugsource | 0 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat:enterprise_linux:8::appstream | python-idna | 0 | 0:2.10-4.module+el8.10.0+21815+bb024982 |
| Red Hat:enterprise_linux:8::appstream | python-lxml | 0 | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-lxml-debugsource | 0 | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-ply | 0 | 0:3.11-10.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-psutil | 0 | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-psutil-debugsource | 0 | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-psycopg2 | 0 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat:enterprise_linux:8::appstream | python-psycopg2-debugsource | 0 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat:enterprise_linux:8::appstream | python-pycparser | 0 | 0:2.20-3.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-pysocks | 0 | 0:1.7.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-requests | 0 | 0:2.25.0-3.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-toml | 0 | 0:0.10.1-5.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python-urllib3 | 0 | 0:1.25.10-5.module+el8.10.0+20443+f0a692fe |
| Red Hat:enterprise_linux:8::appstream | python-wheel | 0 | 1:0.35.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python3.11 | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-debug | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-debuginfo | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-debugsource | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-devel | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-idle | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-libs | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-rpm-macros | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-test | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.11-tkinter | 0 | 0:3.11.9-7.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12 | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-debug | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-debuginfo | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-debugsource | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-devel | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-idle | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-libs | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-rpm-macros | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-test | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python3.12-tkinter | 0 | 0:3.12.5-2.el8_10 |
| Red Hat:enterprise_linux:8::appstream | python39 | 0 | 0:3.9.19-7.module+el8.10.0+22237+51382d7a |
| Red Hat:enterprise_linux:8::appstream | python39-PyMySQL | 0 | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python39-cffi | 0 | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python39-cffi-debuginfo | 0 | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python39-chardet | 0 | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
| Red Hat:enterprise_linux:8::appstream | python39-cryptography | 0 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat:enterprise_linux:8::appstream | python39-cryptography-debuginfo | 0 | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat:enterprise_linux:8::appstream | python39-debuginfo | 0 | 0:3.9.19-7.module+el8.10.0+22237+51382d7a |
Related vulnerabilities
- CVE-2025-12084 When building nested elements using xml.dom.minidom methods such as appendChild() that… Also affects python3.11
- CVE-2025-13836 When reading an HTTP response from a server, if no read amount is specified, the default… Also affects python3.11
- CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path names… Also affects python3.11
- CVE-2024-6232 There is a MEDIUM severity vulnerability affecting CPython. Also affects python3.11
- CVE-2024-6923 There is a MEDIUM severity vulnerability affecting CPython. Also affects python3.11
- CVE-2024-4032 The “ipaddress” module contained incorrect information about whether certain IPv4 and… Also affects python3.11
- CVE-2024-0450 An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7… Also affects python3.11
- CVE-2023-6597 An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions… Also affects python3.11