The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10148 advisory.

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
      * cpython: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)
      * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
      * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
      * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside     extraction directory (CVE-2025-4138)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0121 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-12718:
    Allows modifying some file metadata (e.g. last modified) with filter=dataor file permissions (chmod)     with filter=tarof files outside the extraction directory.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only     Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the     extraction filter feature.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4138:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4330:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4435:
    When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel =     0in affected versions is that the member would still be extracted and not skipped.

    CVE-2025-4517:
    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=data.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7583-1 advisory.

    It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An     attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data     loss.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02049-1 advisory.

    python311 was updated from version 3.11.10 to 3.11.13:

    - Security issues fixed:

      * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS     (bsc#1243273).
      * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed     tarfile         extraction filters to be bypassed using crafted symlinks and hard links         (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)

    - Other bugs fixed:

      * Improved handling of system call failures that OpenSSL reports (bsc#1241067)
      * Disable GC during thread operations to prevent deadlocks.
      * Fixed a potential denial of service vulnerability in the imaplib module.
      * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when     flattening an         email message using a modern email policy.
      * Fixed parsing long IPv6 addresses with embedded IPv4 address.
      * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596.
      * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress.
      * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects
      * os.path.realpath() now accepts a strict keyword-only argument.
      * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption     and a minor         denial-of-service.
      * Updated bundled libexpat to 2.7.1
      * Writers of CPython documentation can now use next as the version for the versionchanged, versionadded,         deprecated directives.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10028 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

    * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02057-1 advisory.

    python311 was updated from version 3.11.10 to 3.11.13:

    - Security issues fixed:

      * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS     (bsc#1243273).
      * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed     tarfile         extraction filters to be bypassed using crafted symlinks and hard links         (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10136 advisory.

    [3.9.21-2.1]
    - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435     Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10140 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

    * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10140 advisory.

    - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10399 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: python: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)

    * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12718 advisory.

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
241262	AlmaLinux 9 : python3.11 (ALSA-2025:10148)	Nessus	Alma Linux Local Security Checks	7/3/2025	7/3/2025	critical
242490	Alibaba Cloud Linux 3 : 0121: python3.11 (ALINUX3-SA-2025:0121)	Nessus	Alibaba Cloud Linux Local Security Checks	7/22/2025	7/22/2025	critical
240210	Ubuntu 24.04 LTS / 24.10 / 25.04 : Python vulnerabilities (USN-7583-1)	Nessus	Ubuntu Local Security Checks	6/20/2025	7/8/2025	critical
240606	SUSE SLES15 Security Update : python311 (SUSE-SU-2025:02049-1)	Nessus	SuSE Local Security Checks	6/26/2025	7/8/2025	critical
241077	RHEL 9 : python3.12 (RHSA-2025:10028)	Nessus	Red Hat Local Security Checks	7/1/2025	7/1/2025	critical
241096	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2025:02057-1)	Nessus	SuSE Local Security Checks	7/1/2025	7/1/2025	critical
241136	Oracle Linux 9 : python3.9 (ELSA-2025-10136)	Nessus	Oracle Linux Local Security Checks	7/2/2025	7/2/2025	critical
241138	RHEL 10 : python3.12 (RHSA-2025:10140)	Nessus	Red Hat Local Security Checks	7/2/2025	7/2/2025	critical
241226	Oracle Linux 10 : python3.12 (ELSA-2025-10140)	Nessus	Oracle Linux Local Security Checks	7/3/2025	7/3/2025	critical
241449	RHEL 9 : python3.9 (RHSA-2025:10399)	Nessus	Red Hat Local Security Checks	7/7/2025	7/7/2025	critical
242398	Azure Linux 3.0 Security Update: python3 (CVE-2024-12718)	Nessus	Azure Linux Local Security Checks	7/19/2025	7/19/2025	critical
243703	Linux Distros Unpatched Vulnerability : CVE-2024-12718	Nessus	Misc.	8/5/2025	8/5/2025	medium

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium