Threats Tagged 'cve-2024-0450'

A vulnerability in the Python zipfile module (CVE-2024-0450) can lead to denial of service via zip-bombs. This issue affects Python as packaged in Red Hat Enterprise Linux 8 and related products. Red Hat has released security updates to address this moderate severity vulnerability. The vulnerability is related to CWE-450 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

A security update for Python 3.12 on Red Hat Enterprise Linux addresses multiple vulnerabilities including denial of service issues via zip-bomb attacks and incorrect handling of private IP ranges. The update fixes vulnerabilities in the zipfile module and iteration over malicious ZIP files that could lead to denial of service, as well as incorrect IPv4 and IPv6 private range definitions. This advisory affects Red Hat Enterprise Linux 9 and related variants. The update is rated as moderate severity by Red Hat Product Security.

A security update for python3.11 in Red Hat Enterprise Linux 9 addresses vulnerabilities in the zipfile module that could lead to denial of service. Specifically, CVE-2024-0450 involves zip-bomb vulnerabilities, and CVE-2024-8088 involves denial of service when iterating over malicious ZIP files. These issues have been rated as moderate severity by Red Hat Product Security. The update is included in Red Hat Enterprise Linux 9.5 and related extended update support versions.