CVE-2024-0397

highPriorität · verfolgen · 0EPSS 0.008 · 56. PerzentilDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.81% (56th) EPSS

CVSS 7.4 · high

Is it mine?

186 products

Prüfe deine Angriffsfläche

Who says so?

8 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-22

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibpython3_11-1_0-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-base-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-devhelp-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-devhelp-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-devhelp-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-doc-devhelp-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-testsuite-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-testsuite-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-testsuite-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-testsuite-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.8–7.4

v3.17.4highAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · ENISA EU

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:HsecondaryAusnutzbarkeit 2.2 · Auswirkung 5.2

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · Siemens ProductCERT DE

v3.16.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.14.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Lsecondary · SUSE Product Security

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-362USCWE-362USCWE-362USCWE-362US

betroffene Produkte (186)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxalle Versionencert_bundDEcpe:/o:debian:debian_linux:-
Dell NetWorkeralle Versionencert_bundDEcpe:/a:dell:networker:-
EMC Avamaralle Versionencert_bundDEcpe:/a:emc:avamar:-
F5 BIG-IPalle Versionencert_bundDEcpe:/a:f5:big-ip:-
Fedora Linuxalle Versionencert_bundDEcpe:/o:fedoraproject:fedora:-
IBM AIX 7.3alle Versionencert_bundDEcpe:/o:ibm:aix:7.3
IBM App Connect Enterprise <12.0.16alle Versionencert_bundDE
IBM App Connect Enterprise <12.16.0alle Versionencert_bundDE
IBM FlashSystemalle Versionencert_bundDEcpe:/a:ibm:flashsystem:-
IBM InfoSphere Information Server 11.7alle Versionencert_bundDEcpe:/a:ibm:infosphere_information_server:11.7
IBM QRadar SIEM <7.5.0 UP10 IF01alle Versionencert_bundDE
IBM SAN Volume Controlleralle Versionencert_bundDEcpe:/a:ibm:san_volume_controller:-
IBM SPSSalle Versionencert_bundDEcpe:/a:ibm:spss:modeler
IBM Storwizealle Versionencert_bundDEcpe:/a:ibm:storwize:-
IBM VIOS 4.1alle Versionencert_bundDEcpe:/a:ibm:vios:4.1
NetApp ActiveIQ Unified Manager for Microsoft Windowsalle Versionencert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows
NetApp ActiveIQ Unified Manager for VMware vSpherealle Versionencert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
Open Source Python <3.10.14alle Versionencert_bundDE
Open Source Python <3.11.9alle Versionencert_bundDE

20 von 186 angezeigt

Advisories (14)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2024-0291 Kwetsbaarheden verholpen in Oracle Database ServerNL2024-07-17csaf · ncsc_nlNL
Er zijn kwetsbaarheden verholpen in Oracle Database Server.
NCSC-2024-0339Kwetsbaarheden verholpen in Microsoft MarinerNL2024-08-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in Mariner (Azure Linux).
NCSC-2025-0021Kwetsbaarheden verholpen in Oracle CommunicationsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communicatieproducten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function en Oracle Communications Order and Service Management.
NCSC-2025-0023Kwetsbaarheden verholpen in Oracle PeopleSoftNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle PeopleSoft, specifiek in de versies 8.60, 8.61 en 9.2.
NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
SUSE-SU-2024:2982-1Security update for python3112024-08-20csaf · suse_csafDE
Security update for python311
WID-SEC-W-2024-1396Python: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und Umgehung von SicherheitsmaßnahmenDeutsch2024-06-17csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Dateien zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
WID-SEC-W-2024-1645Oracle Database Server: Mehrere SchwachstellenDeutsch2024-07-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Database Server ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2025-0225Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2025-01-30csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand herbeizuführen und einen nicht näher spezifizierten Angriff durchzuführen.
BIT-libpython-2024-0397Memory race condition in ssl.SSLContext certificate store methods2025-08-11vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
BIT-python-2024-0397Memory race condition in ssl.SSLContext certificate store methods2024-06-20vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
BIT-python-min-2024-0397Memory race condition in ssl.SSLContext certificate store methods2025-01-17vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
PSF-2024-42024-06-17vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

auch bekannt als (8)

Weitere Namen und Kennungen dieser Entität.

CNNVD-202406-1925 cnnvd
EUVD-2024-16193 enisa_euvd
BDU:2024-05177 fstec_bdu
GHSA-xhf3-pp4q-gxh5 enisa_euvd
BIT-libpython-2024-0397osv
BIT-python-2024-0397osv
BIT-python-min-2024-0397osv
PSF-2024-4osv

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv cert_bund ncsc_nl siemens_psirt suse_csaf NVD CVE.org MITRE

veröffentlicht 2024-06-17geändert 2026-06-17

Referenzen (36)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan