The vulnerability CVE-2024-5642 affects Python/CPython by allowing an empty list to be set for SSLContext.set_npn_protocols(), which is invalid for the OpenSSL API and results in a buffer over-read when NPN is used. This improper input validation (CWE-20) can lead to denial of service through program crashes or resource exhaustion. Red Hat's advisory indicates this affects Red Hat Ceph Storage container images based on ubi9 and Ceph 8.1, and updates have been released to address the issue. The vulnerability is considered low severity due to limited usage of NPN and the rarity of the empty list configuration in practice.

An attacker could cause a denial of service by triggering a buffer over-read in the SSLContext when NPN is used with an empty protocol list, potentially crashing the program or causing excessive resource consumption. There is no indication of confidentiality or integrity impact. The vulnerability is rated low severity by Red Hat due to limited exposure and uncommon usage scenarios.

Red Hat has released updated container images and packages that fix this vulnerability. Users should update to the latest versions of Red Hat Ceph Storage container images available from the Red Hat container registry using the "podman pull" command. No additional mitigations are required as the issue is addressed in these updates.