logo

Database

Asymmetric denial of service - ReDoS In pypy3

Description

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 30

10

Aliases

1. CVE-2024-62322. NVD-2024-62323. OSV-ALPINE-2024-62324. OSV-2024-62325. OSV-DEBIAN-2024-62326. GCVE-2024-62327. SECURITY-CVE-2024-62328. SECURITY-TRACKER-CVE-2024-62329. lists.debian.org10. https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6232.json11. mail.python.org12. security.netapp.com

References

1. https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers2. http://www.openwall.com/lists/oss-security/2024/09/03/53. https://github.com/python/cpython/issues/1212854. https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d45. https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd066. https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c47. https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d8. https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc8779. https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf10. https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d25337311. https://github.com/python/cpython/pull/121286

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.