Test ID:	1.3.6.1.4.1.25623.1.1.12.2025.7488.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-7488-1)
Summary:	The remote host is missing an update for the 'python2.7, python3.4, python3.6, python3.7, python3.8, python3.9, python3.11, python3.13' package(s) announced via the USN-7488-1 advisory.
Description:	Summary: The remote host is missing an update for the 'python2.7, python3.4, python3.6, python3.7, python3.8, python3.9, python3.11, python3.13' package(s) announced via the USN-7488-1 advisory. Vulnerability Insight: It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected python 2.7 and python3.4 on Ubuntu 14.04 LTS, python2.7 on Ubuntu 16.04 LTS, python2.7, python3.6, python3.7, and python3.8 on Ubuntu 18.04 LTS, python2.7 and python3.9 on Ubuntu 20.04 LTS, and python2.7 and python3.11 on Ubuntu 22.04 LTS. (CVE-2024-11168) It was discovered that Python allowed excessive backtracking while parsing certain tarfile headers. A remote attacker could possibly use this issue to cause Python to consume excessive resources, leading to a denial of service. This issue only affected python3.4 on Ubuntu 14.04 LTS, python3.6, python3.7, and python3.8 on Ubuntu 18.04 LTS, python3.9 on Ubuntu 20.04 LTS, and python3.11 on Ubuntu 22.04 LTS. (CVE-2024-6232) It was discovered that Python incorrectly handled quoted path names when using the venv module. A local attacker able to control virtual environments could possibly use this issue to execute arbitrary code when the virtual environment is activated. This issue only affected python3.4 on Ubuntu 14.04 LTS, python3.6, python3.7, and python3.8 on Ubuntu 18.04 LTS, python3.9 on Ubuntu 20.04 LTS, python3.11 on Ubuntu 22.04 LTS, and python3.13 on Ubuntu 24.10. (CVE-2024-9287) Affected Software/OS: 'python2.7, python3.4, python3.6, python3.7, python3.8, python3.9, python3.11, python3.13' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-11168 Common Vulnerability Exposure (CVE) ID: CVE-2024-6232 Common Vulnerability Exposure (CVE) ID: CVE-2024-9287
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.