https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:21:49 +0000 https://vulnerability.circl.lu/vuln/cve-2024-7592 <p><strong>Affected:</strong> Python Software Foundation CPython, python cpython</p> <p>There is a LOW severity vulnerability affecting CPython, specifically the &#39;http.cookies&#39; standard library module.</p> <p>When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.</p> <p><strong>Affected:</strong> Python Software Foundation CPython, python cpython</p> <p>There is a LOW severity vulnerability affecting CPython, specifically the &#39;http.cookies&#39; standard library module.</p> <p>When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.</p> https://vulnerability.circl.lu/vuln/cve-2024-7592 https://vulnerability.circl.lu/vuln/usn-7015-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10, Ubuntu:24.04:LTS: python3.12</p> <p>It was discovered that the Python email module incorrectly parsed email addresses that contain special characters. A remote attacker could possibly use this issue to bypass certain protection mechanisms. (CVE-2023-27043)</p> <p>It was discovered that Python allowed excessive backtracking while parsing certain tarfile headers. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-6232)</p> <p>It was discovered that the Python email module incorrectly quoted newlines for email headers. A remote attacker could possibly use this issue to perform header injection. (CVE-2024-6923)</p> <p>It was discovered that the Python http.cookies module incorrectly handled parsing cookies that contained backslashes for quoted characters. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-7592)</p> <p>It was discovered that the Python zipfile module incorrectly handled certain malformed zip files. A remote attacker could possibly use this issue to cause Python to stop responding, resulting in a denial of service. (CVE-2024-8088)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10, Ubuntu:24.04:LTS: python3.12</p> <p>It was discovered that the Python email module incorrectly parsed email addresses that contain special characters. A remote attacker could possibly use this issue to bypass certain protection mechanisms. (CVE-2023-27043)</p> <p>It was discovered that Python allowed excessive backtracking while parsing certain tarfile headers. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-6232)</p> <p>It was discovered that the Python email module incorrectly quoted newlines for email headers. A remote attacker could possibly use this issue to perform header injection. (CVE-2024-6923)</p> <p>It was discovered that the Python http.cookies module incorrectly handled parsing cookies that contained backslashes for quoted characters. A remote attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-2024-7592)</p> <p>It was discovered that the Python zipfile module incorrectly handled certain malformed zip files. A remote attacker could possibly use this issue to cause Python to stop responding, resulting in a denial of service. (CVE-2024-8088)</p> https://vulnerability.circl.lu/vuln/usn-7015-1