python3.10-libs vulnerabilities (Red Hat)
14 vulnerabilities.
-
python3.10-libsRed Hat SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High -
python3.10-libsRed Hat tarfile hardlink fallback ignores custom extraction filter rejection via None 5.7 Medium -
python3.10-libsRed Hat tarfile extraction filters allow file modification and content disclosure via hard link to symlink 8.4 High -
python3.10-libsRed Hat zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits 2.1 Low -
python3.10-libsRed Hat tarfile extraction filter bypass allows creation of directories outside the destination 6.3 Medium -
python3.10-libsRed Hat `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching 6.0 Medium -
python3.10-libsRed Hat stringprep.map_table_b2() deviates from RFC 3454 Table B.2 6.0 Medium -
python3.10-libsRed Hat Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() 2.4 Low -
python3.10-libsRed Hat Quadratic Behavior in xml.etree.ElementPath Index Predicates 2.0 Low -
python3.10-libsRed Hat Tarfile.extract() doesn't fully respect filter parameter 2.0 Low -
python3.10-libsRed Hat bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow 8.2 High -
python3.10-libsRed Hat Potential DoS via quadratic complexity in unicodedata.normalize() 6.3 Medium -
python3.10-libsRed Hat FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address 5.9 Medium -
python3.10-libsRed Hat The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium