Red Hat Security Advisory: python-idna security and bug fix update
The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd). Security Fix(es): * python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)
AI Analysis
Technical Summary
CVE-2024-3651 is a vulnerability in the python-idna package where specially crafted inputs to the idna.encode() function can cause excessive resource consumption, leading to a denial of service condition. This issue is classified under CWE-400 (Uncontrolled Resource Consumption). Red Hat has issued a security advisory (RHSA-2024:3543) providing updated python-idna packages for Red Hat Enterprise Linux 8.8 Extended Update Support variants to fix this vulnerability. The advisory rates the security impact as moderate and recommends applying the update after ensuring all prior errata are installed.
Potential Impact
An attacker can cause a denial of service by triggering resource exhaustion in the python-idna library through crafted inputs to the idna.encode() function. This could disrupt services or applications relying on this library on affected Red Hat Enterprise Linux 8.8 systems. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python-idna packages (version 2.5-5.el8_8.1) for Red Hat Enterprise Linux 8.8 Extended Update Support to fix this vulnerability. Users should apply these updates promptly after ensuring all previously released errata relevant to their system have been applied. Refer to Red Hat's official advisory RHSA-2024:3543 and the update instructions at https://access.redhat.com/articles/11258 for detailed guidance.
Red Hat Security Advisory: python-idna security and bug fix update
Description
The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd). Security Fix(es): * python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-3651 is a vulnerability in the python-idna package where specially crafted inputs to the idna.encode() function can cause excessive resource consumption, leading to a denial of service condition. This issue is classified under CWE-400 (Uncontrolled Resource Consumption). Red Hat has issued a security advisory (RHSA-2024:3543) providing updated python-idna packages for Red Hat Enterprise Linux 8.8 Extended Update Support variants to fix this vulnerability. The advisory rates the security impact as moderate and recommends applying the update after ensuring all prior errata are installed.
Potential Impact
An attacker can cause a denial of service by triggering resource exhaustion in the python-idna library through crafted inputs to the idna.encode() function. This could disrupt services or applications relying on this library on affected Red Hat Enterprise Linux 8.8 systems. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python-idna packages (version 2.5-5.el8_8.1) for Red Hat Enterprise Linux 8.8 Extended Update Support to fix this vulnerability. Users should apply these updates promptly after ensuring all previously released errata relevant to their system have been applied. Refer to Red Hat's official advisory RHSA-2024:3543 and the update instructions at https://access.redhat.com/articles/11258 for detailed guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:8365
- Cve Count
- 1
Threat ID: 6a1f4e9fe29bf47b50087226
Added to database: 06/02/2026, 21:43:59 UTC
Last enriched: 07/04/2026, 01:33:34 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 49
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.