CVE-2024-6232

CVE Details

CVE-2024-6232

Last Update

9/5/24

NIST CVE Summary

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects any of our products.

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

• Palette VerteX 4.4.14

Revision History

• 1.0 09/05/2024 Initial Publication
• 2.0 09/05/2024 Added Palette VerteX 4.4.14 to Affected Products