CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

Open
MEDIUM (4.3)
  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 3.45

  • T

    Tim Bastin fixed CVE-2024-6232

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 3.45

  • logo

    System updated the risk assessment to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 3.45

    System recalculated raw risk assessment

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 3.45

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 3.45

  • logo

    System updated the risk assessment to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment to 1.72

    System recalculated raw risk assessment

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 1.15

  • logo

    System updated the risk assessment from 1.72 to 0.86

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.15 to 0.86

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.86 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.72 to 3.45

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.86 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.72 to 3.45

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.72 to 3.45

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System

  • logo

    System fixed CVE-2024-6232

  • logo

    System

  • logo

    System detected CVE-2024-6232 with a risk of 1.72

  • logo

    System

  • logo

    System

  • logo

    System fixed CVE-2024-6232

  • logo

    System

  • logo

    System detected CVE-2024-6232 with a risk of 1.72

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 1.72

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 1.72

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 1.72

  • T

    Tim Bastin detected CVE-2024-6232 with a risk of 1.72

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-6232

  • logo

    System updated the risk assessment from 1.72 to 3.45

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 3.45 to 1.72

    System recalculated raw risk assessment

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 3.45 to 4.25

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 3.45 to 4.25

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 3.45 to 4.25

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • S

    Sebastian Kawelke updated the risk assessment from 1.72 to 2.12

    Confidentiality Requirement updated: medium -> low, Integrity Requirement updated: medium -> high, Availability Requirement updated: medium -> high

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 4.25 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 4.25 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 4.25 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.12 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 4.3 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 4.3 to 2.15

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System fixed CVE-2024-6232

  • logo

    System detected CVE-2024-6232 with a risk of 2.15

  • logo

    System updated the risk assessment from 2.15 to 4.3

    System recalculated raw risk assessment

Add a comment

Mark as False Positive
Last calculated at:

Affected component

debian/python3.11

Installed version:
3.11.2-6
Fixed in:
no patch available

Management decisions across the organization

Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 2ab7b793efd72421aea8c3a994ac60202bf1b3a5