Test ID:	1.3.6.1.4.1.25623.1.0.170815
Category:	General
Title:	Python DoS Vulnerability (Mar 2024) - Windows
Summary:	Python is prone to a denial of service (DoS) vulnerability in; libexpat.
Description:	Summary: Python is prone to a denial of service (DoS) vulnerability in libexpat. Vulnerability Insight: libexpat allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. Also, on Windows urllib.request no longer resolves the hostname before checking it against the system's proxy bypass list. Affected Software/OS: Python prior to version 3.8.19, 3.9.x prior to 3.9.19, 3.10.x prior to 3.10.14, 3.11.x prior to 3.11.9 and 3.12.x prior to 3.12.3. Solution: Update to version 3.8.19, 3.9.19, 3.10.14, 3.11.9, 3.12.3 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-52425 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/ https://github.com/libexpat/libexpat/pull/789 https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html http://www.openwall.com/lists/oss-security/2024/03/20/5
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.