Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-7592

Fixed in a distro release EPSS 2%CVSS 7.5

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

Published 2024-08-19 · CVE record · OSV

Products: Python Software Foundation CPython, cpython

Distro releases

ReleasePackageFixed in
AlmaLinux 9python3.113.11.9-7.el9_5.3
AlmaLinux 9python3.11-debug3.11.9-7.el9_5.3
AlmaLinux 9python3.11-devel3.11.9-7.el9_5.3
AlmaLinux 9python3.11-idle3.11.9-7.el9_5.3
AlmaLinux 9python3.11-libs3.11.9-7.el9_5.3
AlmaLinux 9python3.11-test3.11.9-7.el9_5.3
AlmaLinux 9python3.11-tkinter3.11.9-7.el9_5.3
AlmaLinux 9python3.123.12.5-2.el9_5.3
AlmaLinux 9python3.12-debug3.12.5-2.el9_5.3
AlmaLinux 9python3.12-devel3.12.5-2.el9_5.3
AlmaLinux 9python3.12-idle3.12.5-2.el9_5.3
AlmaLinux 9python3.12-libs3.12.5-2.el9_5.3
AlmaLinux 9python3.12-test3.12.5-2.el9_5.3
AlmaLinux 9python3.12-tkinter3.12.5-2.el9_5.3
Alpine 3.17python33.10.15-r0
Alpine 3.18python33.11.10-r0
Alpine 3.19python33.11.10-r0
Alpine 3.20python33.12.6-r0
Alpine 3.21python33.12.6-r0
Alpine 3.22python33.12.6-r0
Alpine 3.23python33.12.6-r0
Alpine 3.24python33.12.6-r0
Amazon Linux 2python2.7.18-1.amzn2.0.11
Amazon Linux 2python-debug2.7.18-1.amzn2.0.11
Amazon Linux 2python-devel2.7.18-1.amzn2.0.11
Amazon Linux 2python-libs2.7.18-1.amzn2.0.11
Amazon Linux 2python-test2.7.18-1.amzn2.0.11
Amazon Linux 2python-tools2.7.18-1.amzn2.0.11
Amazon Linux 2python33.7.16-1.amzn2.0.12
Amazon Linux 2python3-debug3.7.16-1.amzn2.0.12
Amazon Linux 2python3-devel3.7.16-1.amzn2.0.12
Amazon Linux 2python3-libs3.7.16-1.amzn2.0.12
Amazon Linux 2python3-test3.7.16-1.amzn2.0.12
Amazon Linux 2python3-tkinter3.7.16-1.amzn2.0.12
Amazon Linux 2python3-tools3.7.16-1.amzn2.0.12
Amazon Linux 2tkinter2.7.18-1.amzn2.0.11
Amazon Linux 2023python-unversioned-command3.9.20-1.amzn2023.0.2
Amazon Linux 2023python33.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-debug3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-devel3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-idle3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-libs3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-test3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3-tkinter3.9.20-1.amzn2023.0.2
Amazon Linux 2023python3.113.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-debug3.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-devel3.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-idle3.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-libs3.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-test3.11.6-1.amzn2023.0.6
Amazon Linux 2023python3.11-tkinter3.11.6-1.amzn2023.0.6
Chainguardnodejs-1818.20.8-r4
Chainguardnodejs-2020.19.5-r0
Chainguardnodejs-2222.21.1-r1
Chainguardnodejs-2222.21.1-r0
Chainguardpython-3.103.10.15-r0
Chainguardpython-3.113.11.9-r9
Chainguardpython-3.123.12.5-r2
Chainguardpython-3.93.9.20-r0
Debian 11pypy37.3.5+dfsg-2+deb11u5
Debian 11python3.93.9.2-1+deb11u2
Debian 12pypy3no fix
Debian 12python3.113.11.2-6+deb12u5
Debian 13pypy37.3.18+dfsg-1
Debian 13python3.133.13.0~rc2-1
Debian 14pypy37.3.18+dfsg-1
Debian 14python3.133.13.0~rc2-1
Red Hat Enterprise Linux 9python-unversioned-command0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python30:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-debug0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-devel0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-idle0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-libs0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-test0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3-tkinter0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3.110:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-debug0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-debuginfo0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-debugsource0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-devel0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-idle0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-libs0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-test0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.11-tkinter0:3.11.9-7.el9_5.3
Red Hat Enterprise Linux 9python3.120:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-debug0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-debuginfo0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-debugsource0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-devel0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-idle0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-libs0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-test0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.12-tkinter0:3.12.5-2.el9_5.3
Red Hat Enterprise Linux 9python3.90:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3.9-debuginfo0:3.9.21-1.el9_5
Red Hat Enterprise Linux 9python3.9-debugsource0:3.9.21-1.el9_5
Rocky Linux 9python3.110:3.11.9-7.el9_5.3
Rocky Linux 9python3.120:3.12.5-2.el9_5.3
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy3.11.9-1.26.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-core3.11.9-1.26.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-cryptography3.3.2-1.18.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-docker7.0.0-1.8.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-idna3.4-1.9.2
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-passlib1.7.4-1.3.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-passlib-test1.7.4-1.3.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-setuptools67.7.2-1.12.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-urllib32.0.7-1.12.1
SUSE EL-9 Update Products SaltBundle Updatesaltbundlepy-zipp3.15.0-1.9.2
SUSE EL-9 Update Products SaltBundle Updatevenv-salt-minion3006.0-1.47.1
SUSE Enterprise Storage 7.1python33.6.15-150300.10.72.1
SUSE Enterprise Storage 7.1python3-core3.6.15-150300.10.72.1
SUSE Enterprise Storage 7.1python393.9.20-150300.4.52.1
SUSE Enterprise Storage 7.1python39-core3.9.20-150300.4.52.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython33.6.15-150000.3.155.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython3-core3.6.15-150000.3.155.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython33.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython393.9.20-150300.4.52.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython39-core3.9.20-150300.4.52.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython33.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3103.10.15-150400.4.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython310-core3.10.15-150400.4.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3113.11.10-150400.9.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSpython311-documentation3.11.10-150400.9.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython33.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython3103.10.15-150400.4.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython310-core3.10.15-150400.4.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython3113.11.10-150400.9.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSpython311-documentation3.11.10-150400.9.35.1
SUSE Linux Enterprise Micro 5.1python33.6.15-150000.3.155.2
SUSE Linux Enterprise Micro 5.1python3-core3.6.15-150000.3.155.2
SUSE Linux Enterprise Micro 5.2python33.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.2python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.3python33.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.3python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.4python33.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.4python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.5python33.6.15-150300.10.72.1
SUSE Linux Enterprise Micro 5.5python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP5python33.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP5python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP6python33.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP6python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Basesystem 15 SP6python311-core3.11.10-150600.3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP5python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Development Tools 15 SP6python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Module for Legacy 15 SP5python393.9.20-150300.4.52.1
SUSE Linux Enterprise Module for Legacy 15 SP5python39-core3.9.20-150300.4.52.1
SUSE Linux Enterprise Module for Package Hub 15 SP7python2.7.18-150000.105.1
SUSE Linux Enterprise Module for Package Hub 15 SP7python-base2.7.18-150000.105.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4python3113.11.10-150400.9.35.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4python311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise Module for Python 3 15 SP5python3113.11.10-150400.9.35.1
SUSE Linux Enterprise Module for Python 3 15 SP5python311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise Module for Python 3 15 SP5python311-documentation3.11.10-150400.9.35.1
SUSE Linux Enterprise Module for Python 3 15 SP6python3113.11.10-150600.3.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6python311-core3.11.10-150600.3.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6python3123.12.6-150600.3.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6python312-core3.12.6-150600.3.6.1
SUSE Linux Enterprise Module for Web and Scripting 12python33.4.10-25.139.1
SUSE Linux Enterprise Module for Web and Scripting 12python3-base3.4.10-25.139.1
SUSE Linux Enterprise Server 12 SP5python33.4.10-25.139.1
SUSE Linux Enterprise Server 12 SP5python3-base3.4.10-25.139.1
SUSE Linux Enterprise Server 12 SP5python363.6.15-61.1
SUSE Linux Enterprise Server 12 SP5python36-core3.6.15-61.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython33.6.15-150000.3.155.2
SUSE Linux Enterprise Server 15 SP2-LTSSpython3-core3.6.15-150000.3.155.2
SUSE Linux Enterprise Server 15 SP3-LTSSpython33.6.15-150300.10.72.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython393.9.20-150300.4.52.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython39-core3.9.20-150300.4.52.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython33.6.15-150300.10.72.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython3103.10.15-150400.4.57.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython310-core3.10.15-150400.4.57.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython3113.11.10-150400.9.35.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise Server 15 SP4-LTSSpython311-documentation3.11.10-150400.9.35.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python2.7.18-33.66.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-base2.7.18-33.66.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-doc2.7.18-33.66.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5python33.4.10-25.139.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5python3-base3.4.10-25.139.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5python363.6.15-61.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5python36-core3.6.15-61.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python33.6.15-150000.3.155.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2python3-core3.6.15-150000.3.155.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3python33.6.15-150300.10.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python393.9.20-150300.4.52.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python39-core3.9.20-150300.4.52.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python33.6.15-150300.10.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python3-core3.6.15-150300.10.72.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python3103.10.15-150400.4.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python310-core3.10.15-150400.4.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python3113.11.10-150400.9.35.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python311-core3.11.10-150400.9.35.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4python311-documentation3.11.10-150400.9.35.1
SUSE Linux Enterprise Software Development Kit 12 SP5python33.4.10-25.139.1
SUSE Linux Enterprise Software Development Kit 12 SP5python3-base3.4.10-25.139.1
SUSE Linux Enterprise Software Development Kit 12 SP5python36-core3.6.15-61.1
SUSE Linux Micro 6.0python3113.11.11-1.1
SUSE Linux Micro 6.0python3113.11.8-4.1
SUSE Linux Micro 6.0python311-core3.11.11-1.1
SUSE Linux Micro 6.0python311-core3.11.8-4.1
SUSE Linux Micro 6.1python3113.11.12-slfo.1.1_1.1
SUSE Linux Micro 6.1python311-core3.11.12-slfo.1.1_1.1
SUSE Manager Client Tools 12venv-salt-minion3006.0-3.65.1
SUSE Manager Client Tools 15venv-salt-minion3006.0-150000.3.67.1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLSvenv-salt-minion3006.0-1.47.1
SUSE Manager Client Tools for SLE Micro 5venv-salt-minion3006.0-150000.3.67.1
SUSE Manager Proxy 4.3python33.6.15-150300.10.72.1
SUSE Manager Proxy 4.3python3-core3.6.15-150300.10.72.1
SUSE Manager Proxy Module 4.3venv-salt-minion3006.0-150000.3.67.1
SUSE Manager Server 4.3python33.6.15-150300.10.72.1
SUSE Manager Server 4.3python3-core3.6.15-150300.10.72.1
SUSE Manager Server Module 4.3venv-salt-minion3006.0-150000.3.67.1
Ubuntu 20.04 LTSpython3.83.8.10-0ubuntu1~20.04.12
Ubuntu 22.04 LTSpython3.103.10.12-1~22.04.6
Ubuntu 24.04 LTSpython3.123.12.3-1ubuntu0.2
Ubuntu Pro 14.04 LTSpython2.72.7.6-8ubuntu0.6+esm20
Ubuntu Pro 14.04 LTSpython3.4no fix
Ubuntu Pro 14.04 LTSpython3.53.5.2-2ubuntu0~16.04.4~14.04.1+esm3
Ubuntu Pro 16.04 LTSpython2.72.7.12-1ubuntu0~16.04.18+esm10
Ubuntu Pro 16.04 LTSpython3.53.5.2-2ubuntu0~16.04.13+esm14
Ubuntu Pro 18.04 LTSpython2.72.7.17-1~18.04ubuntu1.13+esm5
Ubuntu Pro 18.04 LTSpython3.6no fix
Ubuntu Pro 18.04 LTSpython3.7no fix
Ubuntu Pro 18.04 LTSpython3.8no fix
Ubuntu Pro 20.04 LTSpython2.72.7.18-1~20.04.4+esm2
Ubuntu Pro 20.04 LTSpython3.9no fix
Ubuntu Pro 22.04 LTSpython2.72.7.18-13ubuntu1.2+esm2
Ubuntu Pro 22.04 LTSpython3.11no fix
Wolfinodejs-1818.20.8-r4
Wolfinodejs-2020.19.5-r0
Wolfinodejs-2222.21.1-r1
Wolfinodejs-2222.21.1-r0
Wolfipython-3.103.10.15-r0
Wolfipython-3.113.11.9-r9
Wolfipython-3.123.12.5-r2
openSUSE Leap 15.5python33.6.15-150300.10.72.1
openSUSE Leap 15.5python3-core3.6.15-150300.10.72.1
openSUSE Leap 15.5python3-documentation3.6.15-150300.10.72.1
openSUSE Leap 15.5python3103.10.15-150400.4.57.1
openSUSE Leap 15.5python310-core3.10.15-150400.4.57.1
openSUSE Leap 15.5python310-documentation3.10.15-150400.4.57.1
openSUSE Leap 15.5python3113.11.10-150400.9.35.1
openSUSE Leap 15.5python311-core3.11.10-150400.9.35.1
openSUSE Leap 15.5python311-documentation3.11.10-150400.9.35.1
openSUSE Leap 15.5python393.9.20-150300.4.52.1
openSUSE Leap 15.5python39-core3.9.20-150300.4.52.1
openSUSE Leap 15.5python39-documentation3.9.20-150300.4.52.1
openSUSE Leap 15.6python2.7.18-150000.105.1
openSUSE Leap 15.6python-base2.7.18-150000.105.1
openSUSE Leap 15.6python-doc2.7.18-150000.105.1
openSUSE Leap 15.6python33.6.15-150300.10.72.1
openSUSE Leap 15.6python3-core3.6.15-150300.10.72.1
openSUSE Leap 15.6python3-documentation3.6.15-150300.10.72.1
openSUSE Leap 15.6python3103.10.15-150400.4.57.1
openSUSE Leap 15.6python310-core3.10.15-150400.4.57.1
openSUSE Leap 15.6python310-documentation3.10.15-150400.4.57.1
openSUSE Leap 15.6python3113.11.10-150600.3.6.1
openSUSE Leap 15.6python311-core3.11.10-150600.3.6.1
openSUSE Leap 15.6python311-documentation3.11.10-150600.3.6.1
openSUSE Leap 15.6python3123.12.6-150600.3.6.1
openSUSE Leap 15.6python312-core3.12.6-150600.3.6.1
openSUSE Leap 15.6python312-documentation3.12.6-150600.3.6.1
openSUSE Leap 15.6python393.9.20-150300.4.52.1
openSUSE Leap 15.6python39-core3.9.20-150300.4.52.1
openSUSE Leap 15.6python39-documentation3.9.20-150300.4.52.1
openSUSE Leap Micro 5.5python33.6.15-150300.10.72.1
openSUSE Leap Micro 5.5python3-core3.6.15-150300.10.72.1
openSUSE Tumbleweedpython3103.10.15-1.1
openSUSE Tumbleweedpython3113.11.9-7.1
openSUSE Tumbleweedpython3123.12.6-1.1
openSUSE Tumbleweedpython3133.13.0~rc2-1.1
openSUSE Tumbleweedpython3143.14.0~a1-1.1
openSUSE Tumbleweedpython3153.15.0~a1-1.1
openSUSE Tumbleweedpython393.9.20-2.1