logo

Database

Lack of data validation In python3

Description

There is a MEDIUM severity vulnerability affecting CPython.

The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 29

10

Aliases

1. CVE-2024-69232. NVD-2024-69233. OSV-ALPINE-2024-69234. OSV-2024-69235. OSV-DEBIAN-2024-69236. GCVE-2024-69237. SECURITY-CVE-2024-69238. SECURITY-TRACKER-CVE-2024-69239. lists.debian.org10. lists.debian.org11. https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6923.json12. mail.python.org13. security.netapp.com

References

1. http://www.openwall.com/lists/oss-security/2024/08/01/32. http://www.openwall.com/lists/oss-security/2024/08/02/23. https://github.com/python/cpython/issues/1216504. https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c501475. https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc23846. https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa77. https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d08. https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f19. https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e610. https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb97553311. https://github.com/python/cpython/pull/122233

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.