⌘ + K

UBUNTU-CVE-2024-6232

Dashboard / Vulnerabilities / UBUNTU-CVE-2024-6232

UBUNTU-CVE-2024-6232

Published: 3 Sept 2024Last Modified: 22 Apr 2026

Upstream:

Aliases:

Summary:

Details: There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

References: https://ubuntu.com/security/CVE-2024-6232, https://www.cve.org/CVERecord?id=CVE-2024-6232, https://github.com/python/cpython/pull/121286, https://mail.python.org/archives/list/[email protected]/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/, https://ubuntu.com/security/notices/USN-7015-1, https://ubuntu.com/security/notices/USN-7015-2, https://ubuntu.com/security/notices/USN-7015-5, https://ubuntu.com/security/notices/USN-7488-1

Affected packages

Package

Name: python2.7

Purl: pkg:deb/ubuntu/[email protected]+esm21?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -2.7.6-8ubuntu0.6+esm21

Affected versions

2.7.5-8ubuntu3

2.7.5-8ubuntu4

2.7.6-2

2.7.6-2ubuntu1

2.7.6-3

2.7.6-3ubuntu1

2.7.6-4

2.7.6-4ubuntu1

2.7.6-5

2.7.6-7

2.7.6-8

2.7.6-8ubuntu0.2

2.7.6-8ubuntu0.3

2.7.6-8ubuntu0.4

2.7.6-8ubuntu0.5

2.7.6-8ubuntu0.6+esm2

2.7.6-8ubuntu0.6+esm3

2.7.6-8ubuntu0.6+esm5

2.7.6-8ubuntu0.6+esm6

2.7.6-8ubuntu0.6+esm7

2.7.6-8ubuntu0.6+esm8

2.7.6-8ubuntu0.6+esm9

2.7.6-8ubuntu0.6+esm10

2.7.6-8ubuntu0.6+esm11

2.7.6-8ubuntu0.6+esm12

2.7.6-8ubuntu0.6+esm13

2.7.6-8ubuntu0.6+esm14

2.7.6-8ubuntu0.6+esm15

2.7.6-8ubuntu0.6+esm16

2.7.6-8ubuntu0.6+esm17

2.7.6-8ubuntu0.6+esm18

2.7.6-8ubuntu0.6+esm20

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High