Threats Tagged 'cve-2025-8194'

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273) * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-8194 is a high severity vulnerability in the Python Software Foundation's CPython implementation affecting the tarfile module. The flaw causes the TarFile extraction and entry enumeration APIs to enter an infinite loop when processing tar archives with negative offsets. This results in deadlock during parsing of maliciously crafted tar files. The vulnerability affects specific CPython versions including 3.10.0 through 3.14.0a1. No official patch is listed, but a mitigation patch is available as a third-party workaround.