CVE-2024-0450

Summary

CVECVE-2024-0450
StatePUBLISHED
AssignerUnknown
Source PriorityCVE Program / NVD first with legacy fallback
Published2024-03-19 16:15:00 UTC
Updated2024-04-03 15:15:00 UTC
DescriptionDescription unavailable.

References

ReferenceSourceLinkTags
github.com/python/cpython/commit/fa181fcf2156f703347b03a3b1966ce47be8ab3b github.com
lists.debian.org/debian-lts-announce/2024/03/msg00024.html lists.debian.org
www.bamsoftware.com/hacks/zipbomb www.bamsoftware.com
github.com/python/cpython/commit/66363b9a7b9fe7c99eba3a185b74c5fdbf842eba github.com
github.com/python/cpython/commit/a2c59992e9e8d35baba9695eb186ad6c6ff85c51 github.com
github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183 github.com
lists.debian.org/debian-lts-announce/2024/03/msg00025.html lists.debian.org
github.com/python/cpython/commit/30fe5d853b56138dbec62432d370a1f99409fc85 github.com
github.com/python/cpython/issues/109858 github.com
github.com/python/cpython/commit/a956e510f6336d5ae111ba429a61c3ade30a7549 github.com
mail.python.org/archives/list/[email protected]/thread/XELNUX2L3IO... mail.python.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 510770 Alpine Linux Security Update for python3
  • 6000540 Debian Security Update for python2.7 (DLA 3771-1)
  • 6000541 Debian Security Update for python3.7 (DLA 3772-1)
  • 756025 SUSE Enterprise Linux Security Update for python39 (SUSE-SU-2024:1009-1)
  • 756058 SUSE Enterprise Linux Security Update for python310 (SUSE-SU-2024:1162-1)
  • 908055 Common Base Linux Mariner (CBL-Mariner) Security Update for python3 (36894-2)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report