VDB
BDU%3A2024-09261
BDU%3A2024-09261
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции os.path.normpath() интерпретатора языка программирования Python, связанная с обходом списка разрешений при усечении пути посредством вставки нулевого байта, позволяющая нарушителю нарушить целостность защищаемой информации
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, Python Software Foundation, Almalinux OS Foundation | Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, Python, AlmaLinux |
Timeline
- Nov 11, 2024 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2023-41105 url
- https://errata.almalinux.org/9/ALSA-2023-6494.html url
- https://github.com/python/cpython/issues/106242 advisory
- https://github.com/python/cpython/pull/107981 advisory
- https://github.com/python/cpython/pull/107982 advisory
- https://github.com/python/cpython/pull/107983 advisory
- https://security-tracker.debian.org/tracker/CVE-2023-41105 advisory
- https://access.redhat.com/security/cve/cve-2023-41105 advisory
- https://access.redhat.com/errata/RHSA-2023:7024 advisory
- https://access.redhat.com/errata/RHSA-2023:6494 advisory
- https://ubuntu.com/security/notices/USN-6547-1 advisory
- https://ubuntu.com/security/notices/USN-6891-1 advisory