p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de python · Página 4

Vulnerabilidades publicadas para python en los últimos 30 días: 4. Incluidas en el catálogo KEV: 0.

RSS ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 76

  1. CVE-2025-0938

    Media · CVSS 6.3EPSS 1,56%Corrección disponible

    URL parser allowed square brackets in domain names

    The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.

    pythonPython
    • Actualiza a 3.10.17
    • Actualiza a 3.11.12
    • Actualiza a 3.12.9
    • Actualiza a 3.13.2
    • Actualiza a 3.9.22
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2024-12254

    Alta · CVSS 8.7EPSS 1,87%Corrección disponible

    Unbounded memory buffering in SelectorSocketTransport.writelines()

    Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion. This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true

    pythonPython
    • Actualiza a 3.12.9
    • Actualiza a 3.13.2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2024-11168

    Media · CVSS 6.3EPSS 0,66%Corrección disponible

    Improper validation of IPv6 and IPvFuture addresses

    The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.

    pythonPython
    • Actualiza a 3.10.16
    • Actualiza a 3.11.4
    • Actualiza a 3.9.21
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  4. CVE-2024-9287

    Media · CVSS 5.3EPSS 0,65%Corrección disponible

    Virtual environment (venv) activation scripts don't quote paths

    A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/bin/activate"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie "./venv/bin/python") are not affected.

    pythonPython
    • Actualiza a 3.10.16
    • Actualiza a 3.11.11
    • Actualiza a 3.12.8
    • Actualiza a 3.13.1
    • Actualiza a 3.9.21
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2024-6232

    Alta · CVSS 7.5EPSS 2,2%Corrección disponible

    Regular-expression DoS when parsing TarFile headers

    There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.6
    • Actualiza a 3.13.0rc2
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2024-8088

    Alta · CVSS 8.7EPSS 1,27%Corrección disponible

    Infinite loop when iterating over zip archive entry names from zipfile.Path

    There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.6
    • Actualiza a 3.13.0rc2
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2024-7592

    Alta · CVSS 7.5EPSS 2,3%Corrección disponible

    Quadratic complexity parsing cookies with backslashes

    There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.6
    • Actualiza a 3.13.0rc2
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  8. CVE-2024-6923

    Media · CVSS 5.5EPSS 1,1%Corrección disponible

    Email header injection due to unquoted newlines

    There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.5
    • Actualiza a 3.13.0rc2
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  9. CVE-2024-3219

    Media · CVSS 5.1EPSS 0,25%Corrección disponible

    Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection

    The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.5
    • Actualiza a 3.13.0rc1
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2024-5642

    Media · CVSS 6.5EPSS 0,74%Corrección disponible

    Buffer overread when using an empty list with SSLContext.set_npn_protocols()

    CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).

    pythonPython
    • Actualiza a 3.9.24
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2024-0397

    Alta · CVSS 7.4EPSS 0,81%Corrección disponible

    Memory race condition in ssl.SSLContext certificate store methods

    A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

    pythonPython
    • Actualiza a 3.10.14
    • Actualiza a 3.11.9
    • Actualiza a 3.12.3
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2024-4032

    Alta · CVSS 7.5EPSS 1,08%Corrección disponible

    Incorrect IPv4 and IPv6 private ranges

    The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.4
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2024-4030

    Alta · CVSS 7.1EPSS 0,3%Corrección disponible

    tempfile.mkdtemp() may be readable and writeable by all users on Windows

    On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate configurations or users without a profile directory may not have the intended permissions. If you’re not using Windows or haven’t changed the temporary directory location then you aren’t affected by this vulnerability. On other platforms the returned directory is consistently readable and writable only by the current user. This issue was caused by Python not supporting Unix permissions on W

    pythonPython
    • Actualiza a 3.10.15
    • Actualiza a 3.11.10
    • Actualiza a 3.12.4
    • Actualiza a 3.8.20
    • Actualiza a 3.9.20
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2023-6597

    Alta · CVSS 7.8EPSS 0,31%Corrección disponible

    CVE-2023-6597

    An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

    pythonPython
    • Actualiza a 3.10.14
    • Actualiza a 3.11.8
    • Actualiza a 3.12.1
    • Actualiza a 3.8.19
    • Actualiza a 3.9.19
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2024-0450

    Media · CVSS 6.2EPSS 0,34%Corrección disponible

    Quoted zip-bomb protection for zipfile

    An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

    pythonPython
    • Actualiza a 3.10.14
    • Actualiza a 3.11.8
    • Actualiza a 3.12.2
    • Actualiza a 3.8.19
    • Actualiza a 3.9.19
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2023-6507

    Media · CVSS 6.1EPSS 1,34%Corrección disponible

    Groups not dropped before running subprocess when using empty 'extra_groups' parameter

    An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).

    pythonPython
    • Actualiza a 3.12.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →