The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4169-1 advisory.

    - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307)

    Bug fixes:

    - Remove -IVendor/ from python-config. (bsc#1231795)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:4165-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307)

    Other fixes:
    - Add ipaddress module from https://github.com/phihag/ipaddress
    - Remove -IVendor/ from python-config (bsc#1231795)
    - Stop using %%defattr, it seems to be breaking proper executable       attributes on /usr/bin/ scripts (bsc#1227378).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:1041-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:1043-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1056-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing     hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled     SSRF if a URL is processed by more than one URL parser.(CVE-2024-11168)

Tenable has extracted the preceding description block directly from the EulerOS python3 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0869-1 advisory.

    - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b353a46e0c advisory.

    Security fixes for CVE-2024-11168 and CVE-2025-0938

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7348-1 advisory.

    It was discovered that the Python ipaddress module contained incorrect information about which IP address     ranges were considered private or globally reachable. This could possibly result in     applications applying incorrect security policies. This issue only affected Ubuntu 14.04 LTS and Ubuntu     16.04 LTS. (CVE-2024-4032)

    It was discovered that Python incorrectly handled quoting path names when using the venv module. A local     attacker able to control virtual environments could possibly use this issue to execute arbitrary code when     the virtual environment is activated. (CVE-2024-9287)

    It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could     possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected     Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2024-11168)

    It was discovered that Python incorrectly handled parsing domain names that included square brackets. A     remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
    (CVE-2025-0938)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing     hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled     SSRF if a URL is processed by more than one URL parser. (CVE-2024-11168)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
212553	SUSE SLES12 Security Update : python36 (SUSE-SU-2024:4169-1)	Nessus	SuSE Local Security Checks	12/12/2024	12/12/2024	medium
212566	SUSE SLES12 Security Update : python (SUSE-SU-2024:4165-1)	Nessus	SuSE Local Security Checks	12/12/2024	12/12/2024	medium
233456	SUSE SLES12 Security Update : python3 (SUSE-SU-2025:1041-1)	Nessus	SuSE Local Security Checks	3/28/2025	3/28/2025	medium
233457	SUSE SLES12 Security Update : python36 (SUSE-SU-2025:1043-1)	Nessus	SuSE Local Security Checks	3/28/2025	3/28/2025	medium
233491	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python3 (SUSE-SU-2025:1056-1)	Nessus	SuSE Local Security Checks	3/29/2025	3/29/2025	medium
234148	EulerOS 2.0 SP11 : python3 (EulerOS-SA-2025-1374)	Nessus	Huawei Local Security Checks	4/11/2025	4/11/2025	medium
232757	SUSE SLES12 Security Update : python (SUSE-SU-2025:0869-1)	Nessus	SuSE Local Security Checks	3/15/2025	3/15/2025	medium
216668	Fedora 40 : python3.8 (2025-b353a46e0c)	Nessus	Fedora Local Security Checks	2/23/2025	2/23/2025	medium
232662	Ubuntu 14.04 LTS / 16.04 LTS / 20.04 LTS : Python vulnerabilities (USN-7348-1)	Nessus	Ubuntu Local Security Checks	3/12/2025	9/3/2025	medium
252089	Linux Distros Unpatched Vulnerability : CVE-2024-11168	Nessus	Misc.	8/19/2025	10/14/2025	low

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

low