If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4368-1 advisory.

    - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when     values passed       to it are user-controlled (bsc#1252974).
    - CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for     the creation of       ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4352-1 advisory.

    Update to 3.10.19:

    - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars(). (bsc#1252974)
    - CVE-2025-8291: Check the validity the ZIP64 End of Central Directory (EOCD). (bsc#1251305)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e235793f10 advisory.

    This is the second maintenance release of Python 3.14




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1309 advisory.

    If the value passed to os.path.expandvars() is user-controlled aperformance degradation is possible when     expanding environmentvariables. (CVE-2025-6075)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1293 advisory.

    If the value passed to os.path.expandvars() is user-controlled aperformance degradation is possible when     expanding environmentvariables. (CVE-2025-6075)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1308 advisory.

    If the value passed to os.path.expandvars() is user-controlled aperformance degradation is possible when     expanding environmentvariables. (CVE-2025-6075)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1294 advisory.

    If the value passed to os.path.expandvars() is user-controlled aperformance degradation is possible when     expanding environmentvariables. (CVE-2025-6075)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3084 advisory.

    If the value passed to os.path.expandvars() is user-controlled aperformance degradation is possible when     expanding environmentvariables. (CVE-2025-6075)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4297-1 advisory.

    Update to 3.11.14:

      - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
      - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the     'zipfile' module (bsc#1251305)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4257-1 advisory.

    Update to 3.11.14:

      - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
      - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the     'zipfile' module (bsc#1251305)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4258-1 advisory.

    Update to 3.12.12:

      - CVE-2025-6075: Fixed quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
      - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the     'zipfile' module (bsc#1251305)

    Other fixes:

    - Fix readline history truncation when length is reduced

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4277-1 advisory.

    Update to 3.13.9:

      - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
      - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the     'zipfile' module (bsc#1251305)

    Other fixes:

    - Fix readline history truncation when length is reduced
    - Fixing reproducible build for python-nogil (bsc#1244680)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5058925e1c advisory.

    Backport fix for CVE-2025-6075

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-be2f64c384 advisory.

    Backport fix for CVE-2025-6075

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4221-1 advisory.

    Updated to 3.9.24:

      - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974)
      - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked by the     'zipfile' module (bsc#1251305)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7886-1 advisory.

    It was discovered that Python inefficiently handled expanding system environment variables. An attacker     could possibly use this issue to cause Python to consume excessive resources, leading to a denial of     service. (CVE-2025-6075)

    Caleb Brown discovered that Python incorrectly handled the ZIP64 End of Central Directory (EOCD) Locator     record offset value. An attacker could possibly use this issue to obfuscate malicious content.
    (CVE-2025-8291)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when     expanding environment variables. (CVE-2025-6075)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
278495	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python3 (SUSE-SU-2025:4368-1)	Nessus	SuSE Local Security Checks	low
278181	openSUSE 15 Security Update : python310 (SUSE-SU-2025:4352-1)	Nessus	SuSE Local Security Checks	low
278046	Fedora 43 : python3-docs / python3.14 (2025-e235793f10)	Nessus	Fedora Local Security Checks	low
277809	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-1309)	Nessus	Amazon Linux Local Security Checks	low
277794	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2025-1293)	Nessus	Amazon Linux Local Security Checks	low
277792	Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2025-1308)	Nessus	Amazon Linux Local Security Checks	low
277791	Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2025-1294)	Nessus	Amazon Linux Local Security Checks	low
277762	Amazon Linux 2 : python3, --advisory ALAS2-2025-3084 (ALAS-2025-3084)	Nessus	Amazon Linux Local Security Checks	low
277283	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2025:4297-1)	Nessus	SuSE Local Security Checks	low
277270	SUSE SLES15 Security Update : python311 (SUSE-SU-2025:4257-1)	Nessus	SuSE Local Security Checks	low
277256	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2025:4258-1)	Nessus	SuSE Local Security Checks	low
277247	SUSE SLED15 / SLES15 Security Update : python313 (SUSE-SU-2025:4277-1)	Nessus	SuSE Local Security Checks	low
277039	Fedora 43 : mingw-python3 (2025-5058925e1c)	Nessus	Fedora Local Security Checks	low
277024	Fedora 42 : mingw-python3 (2025-be2f64c384)	Nessus	Fedora Local Security Checks	low
276913	openSUSE 15 Security Update : python39 (SUSE-SU-2025:4221-1)	Nessus	SuSE Local Security Checks	low
276714	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Python vulnerabilities (USN-7886-1)	Nessus	Ubuntu Local Security Checks	low
272130	Linux Distros Unpatched Vulnerability : CVE-2025-6075	Nessus	Misc.	low

Detections

Analytics

CVE-2025-6075

low

Tenable Plugins

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low