VDB
RHBA-2024%3A6429
RHBA-2024%3A6429
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability was found in Python-Django in the get_supported_language_variant() function. The issue triggers when parsed with very long strings, including a specific set of characters, leading to a potential denial of service attack.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ansible-automation-platform-24/ansible-builder-rhel9@sha256:0b1d34d25021a4050f2ea3225a295b08ac76739773404ae2d073117865e56e72_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-automation-platform-24/ansible-builder-rhel9@sha256:0b1d34d25021a4050f2ea3225a295b08ac76739773404ae2d073117865e56e72_ppc64le |
| Red Hat | ansible-automation-platform-24/ee-supported-rhel9@sha256:56f5b0caf7ebc251d6c1f008ea5eaa55b41256614616a65dc1e1a7804ca6e99a_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9 | * |
| Red Hat | ansible-automation-platform-24/lightspeed-rhel8-operator@sha256:36928918970525766f2766362191d4acec97d36a867001da8614a0cbfe346bca_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/lightspeed-rhel8-operator@sha256:36928918970525766f2766362191d4acec97d36a867001da8614a0cbfe346bca_arm64 |
| Red Hat | ansible-automation-platform-24/hub-rhel8@sha256:9657d27e14858a1887a047d244dba035ac4dfe9efbd27567d048f41f79f1b921_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/hub-rhel8@sha256:9657d27e14858a1887a047d244dba035ac4dfe9efbd27567d048f41f79f1b921_s390x |
| Red Hat | ansible-automation-platform-24/ee-supported-rhel8@sha256:84be2c67f630480ea416e4aa526e6d814c96766df419dafef433ea89623ddae7_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/ee-supported-rhel8@sha256:84be2c67f630480ea416e4aa526e6d814c96766df419dafef433ea89623ddae7_arm64 |
| Red Hat | ansible-automation-platform-24/ee-supported-rhel8@sha256:1be515e2723304f0ee9ef7b995090e7ecfc6d779183f3975413c611fd3bddb18_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | * |
| Red Hat | ansible-automation-platform-24/controller-rhel8@sha256:005760eccf8c4adf4a22e39312f51aab8f8e59c48bcf591a80a3bab705bc3e28_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/controller-rhel8@sha256:005760eccf8c4adf4a22e39312f51aab8f8e59c48bcf591a80a3bab705bc3e28_s390x |
| Red Hat | ansible-automation-platform-24/de-minimal-rhel9@sha256:ce07f91d6d7cc76d9e82334d499b7649f90e63ed1b32b844f7f6aaceb9835f84_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9 | * |
| Red Hat | ansible-automation-platform-24/aap-cloud-ui-rhel8@sha256:cc40fc41c84d693d0bc343570cff092d39a5571011338b5eabf158768f0add73_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/aap-cloud-ui-rhel8@sha256:cc40fc41c84d693d0bc343570cff092d39a5571011338b5eabf158768f0add73_amd64 |
| Red Hat | ansible-automation-platform-24/eda-controller-rhel8-operator@sha256:57652d5dedf4be2e2ac686b3b1967ab7f32a05fe68ad7ce1cc939ad777e9756e_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | * |
| Red Hat | ansible-automation-platform-24/eda-controller-rhel8@sha256:535189e5fe344e091a1727d76d0bfb29343ff88d343cb39d58bf7f5556c5449c_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/eda-controller-rhel8@sha256:535189e5fe344e091a1727d76d0bfb29343ff88d343cb39d58bf7f5556c5449c_arm64 |
| Red Hat | ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:37080191daea6b0ffbc37229c95b0746dd49edc6815b81ef0a979f622d3499e0_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:37080191daea6b0ffbc37229c95b0746dd49edc6815b81ef0a979f622d3499e0_ppc64le |
| Red Hat | ansible-automation-platform-24/de-minimal-rhel8@sha256:92c8bb16b3af5d904a8aa58d04f31b65f8d331ce39585eb6abd0853a3ae878f4_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | * |
| Red Hat | ansible-automation-platform-24/hub-web-rhel8@sha256:de3eddc7fdc2b9ffbadca2c9beb6adf1d5075607ee907aa1858e9e07c4e44011_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/hub-web-rhel8@sha256:de3eddc7fdc2b9ffbadca2c9beb6adf1d5075607ee907aa1858e9e07c4e44011_amd64 |
| Red Hat | ansible-automation-platform-24/eda-controller-ui-rhel8@sha256:0a6a43ffe05d6d893046fd18ee6d92eb2528408a26d3559d06620224cfb39d50_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/eda-controller-ui-rhel8@sha256:0a6a43ffe05d6d893046fd18ee6d92eb2528408a26d3559d06620224cfb39d50_amd64 |
| Red Hat | ansible-automation-platform-24/ee-minimal-rhel8@sha256:1fff879d049675b7e467c9b752c9b47749dc472824802d9feda3334fc03957d8_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/ee-minimal-rhel8@sha256:1fff879d049675b7e467c9b752c9b47749dc472824802d9feda3334fc03957d8_s390x |
| Red Hat | ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:6c3d1856078d1385a1d6c2fe8521be84db9c5a9279a9f311e3867a413253dc1a_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:6c3d1856078d1385a1d6c2fe8521be84db9c5a9279a9f311e3867a413253dc1a_amd64 |
| Red Hat | ansible-automation-platform-24/hub-web-rhel8@sha256:bef6335154a2498b4bb13bdb8fcd65b6156bba61f835ac7920fe6d71f370959f_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/hub-web-rhel8@sha256:bef6335154a2498b4bb13bdb8fcd65b6156bba61f835ac7920fe6d71f370959f_ppc64le |
| Red Hat | ansible-automation-platform-24/lightspeed-rhel8-operator@sha256:4c47b8e5262156dc30fd239dd787ce150f4f9067d47c78d6e117bbb1a12377a5_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-automation-platform-24/lightspeed-rhel8-operator@sha256:4c47b8e5262156dc30fd239dd787ce150f4f9067d47c78d6e117bbb1a12377a5_amd64 |
| Red Hat | ansible-automation-platform/ee-containerized-installer-rhel8@sha256:fcfb5d391fdac060af7ed213c409c8a6ec1886cbb8d8e7c8fb543e1f5e279c7b_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8 | * |
…and 104 more
Timeline
- Sep 5, 2024 CVE Published
- Feb 17, 2026 CVE Updated
- May 2, 2026 Security Advisory
- May 2, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHBA-2024:6429 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_6429.json advisory
- https://access.redhat.com/security/cve/CVE-2024-39614 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295938 issue
- https://www.cve.org/CVERecord?id=CVE-2024-39614 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-39614 advisory