REDHAT-BUG-2302255: Medium severity cpython vulnerability
Published Aug 1, 2024
·Updated
There is a MEDIUM severity vulnerability affecting CPython.
The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
Affected Software
1 affected component
Python Software Foundation CPython
Event History
Aug 1, 2024
Data Sourced
via Red Hat·02:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2302255?
The severity of REDHAT-BUG-2302255 is MEDIUM.
2
What does the vulnerability REDHAT-BUG-2302255 affect?
The vulnerability REDHAT-BUG-2302255 affects the CPython email module.
3
How does the vulnerability REDHAT-BUG-2302255 affect email message serialization?
The vulnerability REDHAT-BUG-2302255 allows for header injection due to improper quoting of newlines in email headers.
4
What is required to exploit the vulnerability REDHAT-BUG-2302255?
To exploit the vulnerability REDHAT-BUG-2302255, an attacker needs to manipulate email headers during serialization.
5
How can I mitigate the effects of REDHAT-BUG-2302255?
Mitigation for REDHAT-BUG-2302255 involves updating CPython to the latest version where the vulnerability has been addressed.