The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0981-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-871 advisory.

    A vulnerability has been found in the CPython `venv` module and CLI where path names provided when     creating a virtual environment were not quoted properly, allowing the creator to inject commands into     virtual environment activation scripts (ie source venv/bin/activate). This means that attacker-     controlled virtual environments are able to run commands when the virtual environment is activated.
    Virtual environments which are not created by an attacker or which aren't activated before being used (ie     ./venv/bin/python) are not affected. (CVE-2024-9287)

    The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that     included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be     used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential     parsing across the Python URL parser and other specification-compliant URL parsers. (CVE-2025-0938)

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-917 advisory.

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0883-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0982-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2808 advisory.

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7570-1 advisory.

    It was discovered that Python incorrectly handled certain unicode characters during decoding. An attacker     could possibly use this issue to cause a denial of service. (CVE-2025-4516)

    It was discovered that Python incorrectly handled unicode encoding of email headers with list separators     in folded lines. An attacker could possibly use this issue to expose sensitive information.
    (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1795 advisory.

  - During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4087 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4087-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     March 20, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u3     CVE ID         : CVE-2022-0391 CVE-2025-0938 CVE-2025-1795

    Multiple vulnerabilities were discovered in modules shipped with     cpython 3.9, the primary interpreter for the Python programming     language.

    CVE-2022-0391

        Functions in the urllib.parse module did not sanitize URLs to remove         newline characters, which could lead to injection attacks.

    CVE-2025-0938

        Functions in the urllib.parse and urlparse modules accepted domain         names containing square brackets, which isn't valid.  These         delimiters are only permitted for IPv6 and IPvFuture hosts.  This         problem could result in differential parsing between the Python URL         parser and other specification-compliant URL parsers.

    CVE-2025-1795

        The implementations of e-mail header parsing and folding would         encode the comma used to separate list items, which could cause         receiving applications to interpret two items in the list as though         they were one item.

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u3.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02074-1 advisory.

    Update to version 3.13.5.

    Security issues fixed:

    - CVE-2025-4517: arbitrary filesystem writes outside the extraction directory during extraction with     filter='data' (bsc#1244032)
    - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273).
    - CVE-2025-4330: extraction filter bypass for linking outside extraction directory (bsc#1244060)
    - CVE-2025-4138: may allow symlink targets to point outside the destination directory, and the     modification of some file metadata.
       (bsc#1244059)
    - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse     (bsc#1236705).
    - CVE-2024-12718:  bypass extraction filter to modify file metadata outside extraction directory     (bsc#1244056)
    - CVE-2024-12254: memory exhaustion due to unbounded memory buffering in     `SelectorSocketTransport.writelines()`       (bsc#1234290).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
233206	SUSE SLES15 Security Update : python311 (SUSE-SU-2025:0981-1)	Nessus	SuSE Local Security Checks	3/22/2025	3/22/2025	low
233393	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-871)	Nessus	Amazon Linux Local Security Checks	3/27/2025	3/27/2025	medium
233704	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2025-917)	Nessus	Amazon Linux Local Security Checks	4/1/2025	4/1/2025	low
233001	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2025:0883-1)	Nessus	SuSE Local Security Checks	3/20/2025	3/20/2025	low
233211	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2025:0982-1)	Nessus	SuSE Local Security Checks	3/22/2025	3/22/2025	low
233693	Amazon Linux 2 : python3 (ALAS-2025-2808)	Nessus	Amazon Linux Local Security Checks	4/1/2025	4/1/2025	low
232012	Linux Distros Unpatched Vulnerability : CVE-2025-1795	Nessus	Misc.	3/6/2025	3/6/2025	low
240097	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Python vulnerabilities (USN-7570-1)	Nessus	Ubuntu Local Security Checks	6/17/2025	6/17/2025	medium
234295	CBL Mariner 2.0 Security Update: python3 (CVE-2025-1795)	Nessus	MarinerOS Local Security Checks	4/13/2025	4/13/2025	low
232991	Debian dla-4087 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	3/20/2025	3/20/2025	medium
240592	SUSE SLED15 / SLES15 Security Update : python313 (SUSE-SU-2025:02074-1)	Nessus	SuSE Local Security Checks	6/26/2025	7/8/2025	critical

Detections

Analytics

Plugins Search

low

medium

low

low

low

low

low

medium

low

medium

critical