The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-36baebad86 advisory.

    Security fix for CVE-2025-0938


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7280-1 advisory.

    It was discovered that Python incorrectly handled parsing domain names that included square brackets. A     remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b353a46e0c advisory.

    Security fixes for CVE-2024-11168 and CVE-2025-0938

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0938 advisory.

  - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that     included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be     used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential     parsing across the Python URL parser and other specification-compliant URL parsers. (CVE-2025-0938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0756-1 advisory.

    - Reference to no longer used 'bracketed_host' variable in the fix for CVE-2025-0938 (bsc#1236705,     bsc#1223694).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4087 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4087-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     March 20, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u3     CVE ID         : CVE-2022-0391 CVE-2025-0938 CVE-2025-1795

    Multiple vulnerabilities were discovered in modules shipped with     cpython 3.9, the primary interpreter for the Python programming     language.

    CVE-2022-0391

        Functions in the urllib.parse module did not sanitize URLs to remove         newline characters, which could lead to injection attacks.

    CVE-2025-0938

        Functions in the urllib.parse and urlparse modules accepted domain         names containing square brackets, which isn't valid.  These         delimiters are only permitted for IPv6 and IPvFuture hosts.  This         problem could result in differential parsing between the Python URL         parser and other specification-compliant URL parsers.

    CVE-2025-1795

        The implementations of e-mail header parsing and folding would         encode the comma used to separate list items, which could cause         receiving applications to interpret two items in the list as though         they were one item.

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u3.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0938 advisory.

  - The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that     included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be     used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential     parsing across the Python URL parser and other specification-compliant URL parsers. (CVE-2025-0938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7348-1 advisory.

    It was discovered that the Python ipaddress module contained incorrect information about which IP address     ranges were considered private or globally reachable. This could possibly result in     applications applying incorrect security policies. This issue only affected Ubuntu 14.04 LTS and Ubuntu     16.04 LTS. (CVE-2024-4032)

    It was discovered that Python incorrectly handled quoting path names when using the venv module. A local     attacker able to control virtual environments could possibly use this issue to execute arbitrary code when     the virtual environment is activated. (CVE-2024-9287)

    It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could     possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected     Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-11168)

    It was discovered that Python incorrectly handled parsing domain names that included square brackets. A     remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
    (CVE-2025-0938)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02074-1 advisory.

    Update to version 3.13.5.

    Security issues fixed:

    - CVE-2025-4517: arbitrary filesystem writes outside the extraction directory during extraction with     filter='data' (bsc#1244032)
    - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273).
    - CVE-2025-4330: extraction filter bypass for linking outside extraction directory (bsc#1244060)
    - CVE-2025-4138: may allow symlink targets to point outside the destination directory, and the     modification of some file metadata.
       (bsc#1244059)
    - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse     (bsc#1236705).
    - CVE-2024-12718:  bypass extraction filter to modify file metadata outside extraction directory     (bsc#1244056)
    - CVE-2024-12254: memory exhaustion due to unbounded memory buffering in     `SelectorSocketTransport.writelines()`       (bsc#1234290).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
216233	Fedora 41 : python3.14 (2025-36baebad86)	Nessus	Fedora Local Security Checks	2/13/2025	2/13/2025	medium
216590	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Python vulnerability (USN-7280-1)	Nessus	Ubuntu Local Security Checks	2/21/2025	2/21/2025	medium
216668	Fedora 40 : python3.8 (2025-b353a46e0c)	Nessus	Fedora Local Security Checks	2/23/2025	2/23/2025	medium
216723	CBL Mariner 2.0 Security Update: python3 (CVE-2025-0938)	Nessus	MarinerOS Local Security Checks	2/25/2025	3/20/2025	medium
216979	SUSE SLES15 / openSUSE 15 Security Update : python (SUSE-SU-2025:0756-1)	Nessus	SuSE Local Security Checks	3/1/2025	3/1/2025	medium
232991	Debian dla-4087 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	3/20/2025	3/20/2025	medium
233137	Azure Linux 3.0 Security Update: python3 (CVE-2025-0938)	Nessus	Azure Linux Local Security Checks	3/20/2025	9/15/2025	medium
232662	Ubuntu 14.04 LTS / 16.04 LTS / 20.04 LTS : Python vulnerabilities (USN-7348-1)	Nessus	Ubuntu Local Security Checks	3/12/2025	9/3/2025	medium
240592	SUSE SLED15 / SLES15 Security Update : python313 (SUSE-SU-2025:02074-1)	Nessus	SuSE Local Security Checks	6/26/2025	7/8/2025	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

critical