VDB
RHSA-2025%3A0753
RHSA-2025%3A0753
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the aiohttp package. The Python parser parses newlines in chunk extensions incorrectly, which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed, for example, without the usual C extensions, or `AIOHTTP_NO_EXTENSIONS` is enabled, an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le |
| Red Hat | ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64 |
…and 13 more
Timeline
- Jan 28, 2025 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:0753 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2327130 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333854 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333856 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0753.json advisory
- https://access.redhat.com/security/cve/CVE-2024-52304 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-52304 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-52304 advisory
- https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71 advisory
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr advisory
- https://access.redhat.com/security/cve/CVE-2024-56201 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-56201 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-56201 advisory
- https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f advisory
- https://github.com/pallets/jinja/issues/1792 advisory
- https://github.com/pallets/jinja/releases/tag/3.1.5 advisory
- https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699 advisory
- https://access.redhat.com/security/cve/CVE-2024-56326 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-56326 advisory
…and 3 more