BlackTreeIndependent security intelligence
← Back to the CVE catalogue
Full vulnerability report · 2024
CVE-2024-6345High confidence

Remote Code Execution in pypa/setuptools

pypa · pypa/setuptools

8.8HighCVSS 3.0
Recommended action
Within 7 days

High technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.

Patch available
Distribution package intelligence

Ubuntu vendor package status

Canonical’s release and source-package findings are shown separately from local repository availability.

1 package state
Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Ubuntu releaseSource packageVendor stateFixed versionEvidence
Ubuntu 24.04 LTSnoble · standard archivesetuptoolsVendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.68.1.2-2ubuntu1.1Canonical record ↗Source updated 4 Sept 2026
Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

1 current
CVE-2024-6345 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitypypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools
21 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator
  • ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2
  • ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2
  • ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2
  • ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2
  • ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2
  • ansible-automation-platform-25/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2
  • automation-controller.src as a component of Red Hat Ansible Automation Platform 2
  • rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7
  • python-setuptools.src as a component of Red Hat Enterprise Linux 6
  • python2-setuptools as a component of Red Hat Enterprise Linux 8
  • python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8
Summary
A flaw was found in the package_index module of pypa/setuptools. Affected versions of this package allow remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system.
Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
Optional official sources

National CERT insights
?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

Select the national-authority views to include. The exact source language is shown on each matched advisory. Your choice is remembered on this device and encoded in the shareable URL.

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current
ENISA EUVD identifier

EUVD-2024-2330

No EUVD known-exploited evidence

ENISA has published the identifier mapping but no EUVD description has been stored yet.

EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
Not supplied in the stored EUVD record
Advisory evidence
No linked advisory details stored yet
Recommended actionWithin 7 days

High technical severity with public exploit material referenced by a structured source; prioritise exposed affected systems while verifying vendor guidance.

Patch available
01

What, why and how

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

What

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

Why

Untrusted data can cross into a code-evaluation path and be interpreted as executable instructions.

How

An attacker operating through a network path may attempt exploitation without authentication after a user interaction. If successful, the issue may execute code or commands in the affected security context.

What

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

Why

Untrusted data can cross into a code-evaluation path and be interpreted as executable instructions.

How

An attacker operating through a network path may attempt exploitation without authentication after a user interaction. If successful, the issue may execute code or commands in the affected security context.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
Reference recorded

CISA Vulnrichment records proof-of-concept exploitation in its SSVC data. BlackTree has not independently executed or validated exploit material.

Likely attack path
a network path → Improper Control of Generation of Code ('Code Injection') → execute code or commands in the affected security context
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
Required interaction required
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Unchanged: impact remains within the vulnerable component's security authority
Weakness
?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-94 ↗

CWE-94: Improper Control of Generation of Code ('Code Injection'). The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVSS vector
?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Common Vulnerability Scoring System 3.0: the compact vector below is decoded into plain language.

AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UIRequiredUser interaction: Another user must perform an action for exploitation to succeed.SUnchangedScope: The security impact remains within the vulnerable component's authority.CHighConfidentiality impact: A successful attack can cause a major loss.IHighIntegrity impact: A successful attack can cause a major loss.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land
After compromise, an attacker may use built-in shells, scripting engines, scheduled tasks and native network utilities for discovery, persistence or movement. This is a plausible LoTL path, not evidence that it has occurred for every attack.
NetworkUnauthenticatedRemote code executionCWE-94Public exploit reference
A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

BSI · German · WID-SEC-W-2026-0778Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Official advisory
BSI · German · WID-SEC-W-2025-0001IBM DB2: Mehrere Schwachstellen

Ein entfernter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 on Cloud Pak for Data ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.

Official advisory
BSI · German · WID-SEC-W-2024-3191Oracle Fusion Middleware: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Official advisory
BSI · German · WID-SEC-W-2024-1913Red Hat OpenShift Container Platform: Mehrere Schwachstellen

Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Container Platform ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien und Daten zu manipulieren oder Sicherheitsmaßnahmen zu umgehen.

Official advisory
BSI · German · WID-SEC-W-2024-1815IBM VIOS und AIX: Mehrere Schwachstellen

Ein entfernter Angreifer oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in IBM VIOS und IBM AIX ausnutzen, um Informationen offenzulegen oder um beliebigen Code auszuführen.

Official advisory
BSI · German · WID-SEC-W-2024-1802IBM Business Automation Workflow: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.

Official advisory
BSI · German · WID-SEC-W-2024-1756Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.

Official advisory
BSI · German · WID-SEC-W-2025-0225Dell PowerProtect Data Domain: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand herbeizuführen und einen nicht näher spezifizierten Angriff durchzuführen.

Official advisory
CERT-FR · French · CERTFR-2026-AVI-0627Multiples vulnérabilités dans les produits Splunk

ecord?id=CVE-2024-45339 Référence CVE CVE-2024-47081 https://www.cve.org/CVERecord?id=CVE-2024-47081 Référence CVE CVE-2024-47561 https://www.cve.org/CVERecord?id=CVE-2024-47561 Référence CVE CVE-2024-52304 https://www.cve.org/CVERecord?id=CVE-2024-52304 Référence CVE CVE-2024-5321 https://www.cve.org/CVERecord?id=CVE-2024-5321 Référence CVE CVE-2024-53899 https://www.cve.org/CVERecord?id=CVE-2024-53899 Référence CVE CVE-2024-5535 https://www.cve.org/CVERecord?id=CVE-2024-5535 Référence CVE CVE-2024-55549 https://www.cve.org/CVERecord?id=CVE-2024-55549 Référence CVE CVE-2024-58251 https://www.cve.org/CVERecord?id=CVE-2024-58251 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Référence CVE CVE-2024-7592 https://www.cve.org/CVERecord?id=CVE-2024-7592 Référence CVE CVE-2024-8775 https://www.cve.org/CVERecord?id=CVE-2024-8775 Référence CVE CVE-2024-9681 https://www.cve.org/CVERecord?id=CVE-2024-9681 Référence CVE CVE-2025-0938 https://www.cve.org/CVERecord?id=CVE-2025-0938 Référence CVE CVE-2025-11143 https://www.cve.org/CVERecord?id=CVE-2025-11143 Référence CVE CVE-2025-11187 https://www.cve.org/CVERecord?id=CVE-2025-11187 Référence CVE CVE-2025-11226 https://www.cve.org/CVERecord?id=CVE-2025-11

Official advisory
CERT-FR · French · CERTFR-2026-AVI-0326Multiples vulnérabilités dans les produits VMware

ord?id=CVE-2024-58096 Référence CVE CVE-2024-58097 https://www.cve.org/CVERecord?id=CVE-2024-58097 Référence CVE CVE-2024-58098 https://www.cve.org/CVERecord?id=CVE-2024-58098 Référence CVE CVE-2024-58100 https://www.cve.org/CVERecord?id=CVE-2024-58100 Référence CVE CVE-2024-58237 https://www.cve.org/CVERecord?id=CVE-2024-58237 Référence CVE CVE-2024-58238 https://www.cve.org/CVERecord?id=CVE-2024-58238 Référence CVE CVE-2024-58241 https://www.cve.org/CVERecord?id=CVE-2024-58241 Référence CVE CVE-2024-58251 https://www.cve.org/CVERecord?id=CVE-2024-58251 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6519 https://www.cve.org/CVERecord?id=CVE-2024-6519 Référence CVE CVE-2024-7883 https://www.cve.org/CVERecord?id=CVE-2024-7883 Référence CVE CVE-2024-8354 https://www.cve.org/CVERecord?id=CVE-2024-8354 Référence CVE CVE-2024-8612 https://www.cve.org/CVERecord?id=CVE-2024-8612 Référence CVE CVE-2024-9143 https://www.cve.org/CVERecord?id=CVE-2024-9143 Référence CVE CVE-2025-0012 https://www.cve.org/CVERecord?id=CVE-2025-0012 Référence CVE CVE-2025-0033 https://www.cve.org/CVERecord?id=CVE-2025-0033 Référence CVE CVE-2025-0167 https://www.cve.org/CVERecord?id=CVE-2025-0167 Ré

Official advisory
CERT-FR · French · CERTFR-2026-AVI-0316Multiples vulnérabilités dans les produits VMware

ord?id=CVE-2024-58096 Référence CVE CVE-2024-58097 https://www.cve.org/CVERecord?id=CVE-2024-58097 Référence CVE CVE-2024-58098 https://www.cve.org/CVERecord?id=CVE-2024-58098 Référence CVE CVE-2024-58100 https://www.cve.org/CVERecord?id=CVE-2024-58100 Référence CVE CVE-2024-58237 https://www.cve.org/CVERecord?id=CVE-2024-58237 Référence CVE CVE-2024-58238 https://www.cve.org/CVERecord?id=CVE-2024-58238 Référence CVE CVE-2024-58241 https://www.cve.org/CVERecord?id=CVE-2024-58241 Référence CVE CVE-2024-58251 https://www.cve.org/CVERecord?id=CVE-2024-58251 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6519 https://www.cve.org/CVERecord?id=CVE-2024-6519 Référence CVE CVE-2024-7883 https://www.cve.org/CVERecord?id=CVE-2024-7883 Référence CVE CVE-2024-8354 https://www.cve.org/CVERecord?id=CVE-2024-8354 Référence CVE CVE-2024-8612 https://www.cve.org/CVERecord?id=CVE-2024-8612 Référence CVE CVE-2024-9143 https://www.cve.org/CVERecord?id=CVE-2024-9143 Référence CVE CVE-2025-0012 https://www.cve.org/CVERecord?id=CVE-2025-0012 Référence CVE CVE-2025-0033 https://www.cve.org/CVERecord?id=CVE-2025-0033 Référence CVE CVE-2025-0167 https://www.cve.org/CVERecord?id=CVE-2025-0167 Ré

Official advisory
CERT-FR · French · CERTFR-2026-AVI-0315Multiples vulnérabilités dans les produits VMware

isories/0/37209 Bulletin de sécurité VMware 37210 du 18 mars 2026 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37210 Référence CVE CVE-2017-8806 https://www.cve.org/CVERecord?id=CVE-2017-8806 Référence CVE CVE-2023-22796 https://www.cve.org/CVERecord?id=CVE-2023-22796 Référence CVE CVE-2023-28120 https://www.cve.org/CVERecord?id=CVE-2023-28120 Référence CVE CVE-2023-38037 https://www.cve.org/CVERecord?id=CVE-2023-38037 Référence CVE CVE-2024-3220 https://www.cve.org/CVERecord?id=CVE-2024-3220 Référence CVE CVE-2024-47611 https://www.cve.org/CVERecord?id=CVE-2024-47611 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2025-11468 https://www.cve.org/CVERecord?id=CVE-2025-11468 Référence CVE CVE-2025-12084 https://www.cve.org/CVERecord?id=CVE-2025-12084 Référence CVE CVE-2025-12781 https://www.cve.org/CVERecord?id=CVE-2025-12781 Référence CVE CVE-2025-13034 https://www.cve.org/CVERecord?id=CVE-2025-13034 Référence CVE CVE-2025-13462 https://www.cve.org/CVERecord?id=CVE-2025-13462 Référence CVE CVE-2025-13836 https://www.cve.org/CVERecord?id=CVE-2025-13836 Référence CVE CVE-2025-13837 https://www.cve.org/CVERecord?id=CVE-2025-13837 Référence CVE CVE-2025-14017 https://www.cve.org/CVERecord?id=C

Official advisory
CERT-FR · French · CERTFR-2026-AVI-0218Multiples vulnérabilités dans les produits VMware

Record?id=CVE-2024-5642 Référence CVE CVE-2024-56433 https://www.cve.org/CVERecord?id=CVE-2024-56433 Référence CVE CVE-2024-56538 https://www.cve.org/CVERecord?id=CVE-2024-56538 Référence CVE CVE-2024-57360 https://www.cve.org/CVERecord?id=CVE-2024-57360 Référence CVE CVE-2024-57970 https://www.cve.org/CVERecord?id=CVE-2024-57970 Référence CVE CVE-2024-58011 https://www.cve.org/CVERecord?id=CVE-2024-58011 Référence CVE CVE-2024-58251 https://www.cve.org/CVERecord?id=CVE-2024-58251 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6232 https://www.cve.org/CVERecord?id=CVE-2024-6232 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6763 https://www.cve.org/CVERecord?id=CVE-2024-6763 Référence CVE CVE-2024-7006 https://www.cve.org/CVERecord?id=CVE-2024-7006 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Référence CVE CVE-2024-8088 https://www.cve.org/CVERecord?id=CVE-2024-8088 Référence CVE CVE-2024-8096 https://www.cve.org/CVERecord?id=CVE-2024-8096 Référence CVE CVE-2024-8176 https://www.cve.org/CVERecord?id=CVE-2024-8176 Référence CVE CVE-2024-8244 https://www.cve.org/CVERecord?id=CVE-2024-8244 Référence CVE CVE-2024-9143 https://www.cve.org/CVERecord?id=CVE-2024-9143 Ré

Official advisory
CERT-FR · French · CERTFR-2025-AVI-1036Multiples vulnérabilités dans les produits VMware

g/CVERecord?id=CVE-2024-45341 Référence CVE CVE-2024-4603 https://www.cve.org/CVERecord?id=CVE-2024-4603 Référence CVE CVE-2024-47081 https://www.cve.org/CVERecord?id=CVE-2024-47081 Référence CVE CVE-2024-4741 https://www.cve.org/CVERecord?id=CVE-2024-4741 Référence CVE CVE-2024-50602 https://www.cve.org/CVERecord?id=CVE-2024-50602 Référence CVE CVE-2024-51744 https://www.cve.org/CVERecord?id=CVE-2024-51744 Référence CVE CVE-2024-5535 https://www.cve.org/CVERecord?id=CVE-2024-5535 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6232 https://www.cve.org/CVERecord?id=CVE-2024-6232 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6923 https://www.cve.org/CVERecord?id=CVE-2024-6923 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Référence CVE CVE-2024-7592 https://www.cve.org/CVERecord?id=CVE-2024-7592 Référence CVE CVE-2024-8088 https://www.cve.org/CVERecord?id=CVE-2024-8088 Référence CVE CVE-2024-9143 https://www.cve.org/CVERecord?id=CVE-2024-9143 Référence CVE CVE-2024-9287 https://www.cve.org/CVERecord?id=CVE-2024-9287 Référence CVE CVE-2025-0913 https://www.cve.org/CVERecord?id=CVE-2025-0913 Référence CVE CVE-2025-0938 https://www.cve.org/CVERecord?id=CVE-2025-0938 Ré

Official advisory
CERT-FR · French · CERTFR-2025-AVI-1013Multiples vulnérabilités dans les produits IBM

d?id=CVE-2024-35255 Référence CVE CVE-2024-47252 https://www.cve.org/CVERecord?id=CVE-2024-47252 Référence CVE CVE-2024-47619 https://www.cve.org/CVERecord?id=CVE-2024-47619 Référence CVE CVE-2024-49350 https://www.cve.org/CVERecord?id=CVE-2024-49350 Référence CVE CVE-2024-52533 https://www.cve.org/CVERecord?id=CVE-2024-52533 Référence CVE CVE-2024-52903 https://www.cve.org/CVERecord?id=CVE-2024-52903 Référence CVE CVE-2024-56346 https://www.cve.org/CVERecord?id=CVE-2024-56346 Référence CVE CVE-2024-56347 https://www.cve.org/CVERecord?id=CVE-2024-56347 Référence CVE CVE-2024-57699 https://www.cve.org/CVERecord?id=CVE-2024-57699 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Référence CVE CVE-2025-0915 https://www.cve.org/CVERecord?id=CVE-2025-0915 Référence CVE CVE-2025-1000 https://www.cve.org/CVERecord?id=CVE-2025-1000 Référence CVE CVE-2025-1493 https://www.cve.org/CVERecord?id=CVE-2025-1493 Référence CVE CVE-2025-1992 https://www.cve.org/CVERecord?id=CVE-2025-1992 Référence CVE CVE-2025-22026 https://www.cve.org/CVERecord?id=CVE-2025-22026 Référence CVE CVE-2025-2518 https://www.cve.org/CVERecord?id=CVE-2025-2518 Référence CVE CVE-2025-3050 https://www.cve.org/CVERecord?id=CVE-2025-3050

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0969Multiples vulnérabilités dans les produits VMware

ERecord?id=CVE-2024-58085 Référence CVE CVE-2024-58086 https://www.cve.org/CVERecord?id=CVE-2024-58086 Référence CVE CVE-2024-58088 https://www.cve.org/CVERecord?id=CVE-2024-58088 Référence CVE CVE-2024-58090 https://www.cve.org/CVERecord?id=CVE-2024-58090 Référence CVE CVE-2024-58093 https://www.cve.org/CVERecord?id=CVE-2024-58093 Référence CVE CVE-2024-58266 https://www.cve.org/CVERecord?id=CVE-2024-58266 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6174 https://www.cve.org/CVERecord?id=CVE-2024-6174 Référence CVE CVE-2024-6232 https://www.cve.org/CVERecord?id=CVE-2024-6232 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6923 https://www.cve.org/CVERecord?id=CVE-2024-6923 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Référence CVE CVE-2024-7592 https://www.cve.org/CVERecord?id=CVE-2024-7592 Référence CVE CVE-2024-8088 https://www.cve.org/CVERecord?id=CVE-2024-8088 Référence CVE CVE-2024-8096 https://www.cve.org/CVERecord?id=CVE-2024-8096 Référence CVE CVE-2024-8176 https://www.cve.org/CVERecord?id=CVE-2024-8176 Référence CVE CVE-2024-8508 https://www.cve.org/CVERecord?id=CVE-2024-8508 Ré

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0935Multiples vulnérabilités dans les produits VMware

ort-content-notification/-/external/content/SecurityAdvisories/0/36262 Bulletin de sécurité VMware 36263 du 28 octobre 2025 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36263 Bulletin de sécurité VMware 36264 du 28 octobre 2025 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36264 Référence CVE CVE-2016-1000027 https://www.cve.org/CVERecord?id=CVE-2016-1000027 Référence CVE CVE-2022-29458 https://www.cve.org/CVERecord?id=CVE-2022-29458 Référence CVE CVE-2024-12798 https://www.cve.org/CVERecord?id=CVE-2024-12798 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6763 https://www.cve.org/CVERecord?id=CVE-2024-6763 Référence CVE CVE-2025-11226 https://www.cve.org/CVERecord?id=CVE-2025-11226 Référence CVE CVE-2025-22227 https://www.cve.org/CVERecord?id=CVE-2025-22227 Référence CVE CVE-2025-27151 https://www.cve.org/CVERecord?id=CVE-2025-27151 Référence CVE CVE-2025-32414 https://www.cve.org/CVERecord?id=CVE-2025-32414 Référence CVE CVE-2025-32415 https://www.cve.org/CVERecord?id=CVE-2025-32415 Référence CVE CVE-2025-4674 https://www.cve.org/CVERecord?id=CVE-2025-4674 Référence CVE CVE-2025-46817 https://www.cve.org/CVERecord?id=CVE-2

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0756Multiples vulnérabilités dans les produits VMware

ERecord?id=CVE-2024-56406 Référence CVE CVE-2024-56433 https://www.cve.org/CVERecord?id=CVE-2024-56433 Référence CVE CVE-2024-56664 https://www.cve.org/CVERecord?id=CVE-2024-56664 Référence CVE CVE-2024-56751 https://www.cve.org/CVERecord?id=CVE-2024-56751 Référence CVE CVE-2024-58093 https://www.cve.org/CVERecord?id=CVE-2024-58093 Référence CVE CVE-2024-58251 https://www.cve.org/CVERecord?id=CVE-2024-58251 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6174 https://www.cve.org/CVERecord?id=CVE-2024-6174 Référence CVE CVE-2024-6232 https://www.cve.org/CVERecord?id=CVE-2024-6232 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6763 https://www.cve.org/CVERecord?id=CVE-2024-6763 Référence CVE CVE-2024-6923 https://www.cve.org/CVERecord?id=CVE-2024-6923 Référence CVE CVE-2024-7012 https://www.cve.org/CVERecord?id=CVE-2024-7012 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Référence CVE CVE-2024-7592 https://www.cve.org/CVERecord?id=CVE-2024-7592 Référence CVE CVE-2024-8088 https://www.cve.org/CVERecord?id=CVE-2024-8088 Référence CVE CVE-2024-8096 https://www.cve.org/CVERecord?id=CVE-2024-8096 Ré

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0563Multiples vulnérabilités dans les produits Splunk

d?id=CVE-2024-45230 Référence CVE CVE-2024-45337 https://www.cve.org/CVERecord?id=CVE-2024-45337 Référence CVE CVE-2024-45338 https://www.cve.org/CVERecord?id=CVE-2024-45338 Référence CVE CVE-2024-45801 https://www.cve.org/CVERecord?id=CVE-2024-45801 Référence CVE CVE-2024-47875 https://www.cve.org/CVERecord?id=CVE-2024-47875 Référence CVE CVE-2024-48949 https://www.cve.org/CVERecord?id=CVE-2024-48949 Référence CVE CVE-2024-49767 https://www.cve.org/CVERecord?id=CVE-2024-49767 Référence CVE CVE-2024-52616 https://www.cve.org/CVERecord?id=CVE-2024-52616 Référence CVE CVE-2024-52804 https://www.cve.org/CVERecord?id=CVE-2024-52804 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Référence CVE CVE-2024-8096 https://www.cve.org/CVERecord?id=CVE-2024-8096 Référence CVE CVE-2024-9143 https://www.cve.org/CVERecord?id=CVE-2024-9143 Référence CVE CVE-2024-9681 https://www.cve.org/CVERecord?id=CVE-2024-9681 Référence CVE CVE-2025-0167 https://www.cve.org/CVERecord?id=CVE-2025-0167 Référence CVE CVE-2025-0725 https://www.cve.org/CVERecord?id=CVE-2025-0725 Référence CVE CVE-2025-20300 https://www.cve.org/CVERecord?id=CVE-2025-20300 Référence CVE CVE-2025-20319 https://www.cve.org/CVERecord?id=CVE-2025-2031

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0546Multiples vulnérabilités dans les produits IBM

d?id=CVE-2024-37891 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-45338 https://www.cve.org/CVERecord?id=CVE-2024-45338 Référence CVE CVE-2024-45590 https://www.cve.org/CVERecord?id=CVE-2024-45590 Référence CVE CVE-2024-49766 https://www.cve.org/CVERecord?id=CVE-2024-49766 Référence CVE CVE-2024-49767 https://www.cve.org/CVERecord?id=CVE-2024-49767 Référence CVE CVE-2024-52798 https://www.cve.org/CVERecord?id=CVE-2024-52798 Référence CVE CVE-2024-56334 https://www.cve.org/CVERecord?id=CVE-2024-56334 Référence CVE CVE-2024-56406 https://www.cve.org/CVERecord?id=CVE-2024-56406 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6375 https://www.cve.org/CVERecord?id=CVE-2024-6375 Référence CVE CVE-2024-7553 https://www.cve.org/CVERecord?id=CVE-2024-7553 Référence CVE CVE-2024-8176 https://www.cve.org/CVERecord?id=CVE-2024-8176 Référence CVE CVE-2024-8207 https://www.cve.org/CVERecord?id=CVE-2024-8207 Référence CVE CVE-2024-8305 https://www.cve.org/CVERecord?id=CVE-2024-8305 Référence CVE CVE-2025-22870 https://www.cve.org/CVERecord?id=CVE-2025-22870 Référence CVE CVE-2025-27152 https://www.cve.org/CVERecord?id=CVE-2025-27152 Référence CVE CVE-2025-27516 https://www.cve.org/CVERecord?id=CVE-2025-27

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0512Multiples vulnérabilités dans les produits IBM

d?id=CVE-2024-47561 Référence CVE CVE-2024-49761 https://www.cve.org/CVERecord?id=CVE-2024-49761 Référence CVE CVE-2024-51744 https://www.cve.org/CVERecord?id=CVE-2024-51744 Référence CVE CVE-2024-52046 https://www.cve.org/CVERecord?id=CVE-2024-52046 Référence CVE CVE-2024-52798 https://www.cve.org/CVERecord?id=CVE-2024-52798 Référence CVE CVE-2024-53197 https://www.cve.org/CVERecord?id=CVE-2024-53197 Référence CVE CVE-2024-53382 https://www.cve.org/CVERecord?id=CVE-2024-53382 Référence CVE CVE-2024-56171 https://www.cve.org/CVERecord?id=CVE-2024-56171 Référence CVE CVE-2024-57965 https://www.cve.org/CVERecord?id=CVE-2024-57965 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6827 https://www.cve.org/CVERecord?id=CVE-2024-6827 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Référence CVE CVE-2025-0917 https://www.cve.org/CVERecord?id=CVE-2025-0917 Référence CVE CVE-2025-0923 https://www.cve.org/CVERecord?id=CVE-2025-0923 Référence CVE CVE-2025-22868 https://www.cve.org/CVERecord?id=CVE-2025-22868 Référence CVE CVE-2025-22869 https://www.cve.org/CVERecord?id=CVE-2025-22869 Référence CVE CVE-2025-22870 https://www.cve.org/CVERecord?id=CVE-2025-22870 Référence CVE CVE-2025-24928 https://www.cve.org/CVERecord?id=CVE-2025-

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0384Multiples vulnérabilités dans les produits IBM

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0356Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA)

De multiples vulnérabilités ont été découvertes dans les produits Splunk User Behavior Analytics (UBA). Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0233Multiples vulnérabilités dans les produits IBM

ecord?id=CVE-2024-45590 Référence CVE CVE-2024-47764 https://www.cve.org/CVERecord?id=CVE-2024-47764 Référence CVE CVE-2024-49766 https://www.cve.org/CVERecord?id=CVE-2024-49766 Référence CVE CVE-2024-49767 https://www.cve.org/CVERecord?id=CVE-2024-49767 Référence CVE CVE-2024-52798 https://www.cve.org/CVERecord?id=CVE-2024-52798 Référence CVE CVE-2024-5569 https://www.cve.org/CVERecord?id=CVE-2024-5569 Référence CVE CVE-2024-56346 https://www.cve.org/CVERecord?id=CVE-2024-56346 Référence CVE CVE-2024-56347 https://www.cve.org/CVERecord?id=CVE-2024-56347 Référence CVE CVE-2024-6221 https://www.cve.org/CVERecord?id=CVE-2024-6221 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 21 mars 2025 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0135Multiples vulnérabilités dans IBM QRadar Deployment Intelligence App

ord?id=CVE-2024-35195 Référence CVE CVE-2024-3651 https://www.cve.org/CVERecord?id=CVE-2024-3651 Référence CVE CVE-2024-37891 https://www.cve.org/CVERecord?id=CVE-2024-37891 Référence CVE CVE-2024-42459 https://www.cve.org/CVERecord?id=CVE-2024-42459 Référence CVE CVE-2024-42460 https://www.cve.org/CVERecord?id=CVE-2024-42460 Référence CVE CVE-2024-42461 https://www.cve.org/CVERecord?id=CVE-2024-42461 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-48948 https://www.cve.org/CVERecord?id=CVE-2024-48948 Référence CVE CVE-2024-52798 https://www.cve.org/CVERecord?id=CVE-2024-52798 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 14 février 2025 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2025-AVI-0003Multiples vulnérabilités dans les produits IBM

ord?id=CVE-2024-41110 Référence CVE CVE-2024-41123 https://www.cve.org/CVERecord?id=CVE-2024-41123 Référence CVE CVE-2024-41946 https://www.cve.org/CVERecord?id=CVE-2024-41946 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-45491 https://www.cve.org/CVERecord?id=CVE-2024-45491 Référence CVE CVE-2024-45590 https://www.cve.org/CVERecord?id=CVE-2024-45590 Référence CVE CVE-2024-47220 https://www.cve.org/CVERecord?id=CVE-2024-47220 Référence CVE CVE-2024-47554 https://www.cve.org/CVERecord?id=CVE-2024-47554 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6387 https://www.cve.org/CVERecord?id=CVE-2024-6387 Gestion détaillée du document le 03 janvier 2025 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-1103Multiples vulnérabilités dans les produits IBM

Record?id=CVE-2024-4067 Référence CVE CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 Référence CVE CVE-2024-41752 https://www.cve.org/CVERecord?id=CVE-2024-41752 Référence CVE CVE-2024-4367 https://www.cve.org/CVERecord?id=CVE-2024-4367 Référence CVE CVE-2024-43796 https://www.cve.org/CVERecord?id=CVE-2024-43796 Référence CVE CVE-2024-45082 https://www.cve.org/CVERecord?id=CVE-2024-45082 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-45590 https://www.cve.org/CVERecord?id=CVE-2024-45590 Référence CVE CVE-2024-51504 https://www.cve.org/CVERecord?id=CVE-2024-51504 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7006 https://www.cve.org/CVERecord?id=CVE-2024-7006 Référence CVE CVE-2024-7264 https://www.cve.org/CVERecord?id=CVE-2024-7264 Gestion détaillée du document le 20 décembre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-1030Multiples vulnérabilités dans IBM QRadar

De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory
CERT-FR · French · CERTFR-2024-AVI-1015Multiples vulnérabilités dans les produits IBM

ord?id=CVE-2024-43799 Référence CVE CVE-2024-43800 https://www.cve.org/CVERecord?id=CVE-2024-43800 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-45590 https://www.cve.org/CVERecord?id=CVE-2024-45590 Référence CVE CVE-2024-45801 https://www.cve.org/CVERecord?id=CVE-2024-45801 Référence CVE CVE-2024-46982 https://www.cve.org/CVERecord?id=CVE-2024-46982 Référence CVE CVE-2024-47831 https://www.cve.org/CVERecord?id=CVE-2024-47831 Référence CVE CVE-2024-47875 https://www.cve.org/CVERecord?id=CVE-2024-47875 Référence CVE CVE-2024-5569 https://www.cve.org/CVERecord?id=CVE-2024-5569 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-7254 https://www.cve.org/CVERecord?id=CVE-2024-7254 Gestion détaillée du document le 22 novembre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0958Multiples vulnérabilités dans les produits IBM

ERecord?id=CVE-2024-45590 Référence CVE CVE-2024-45801 https://www.cve.org/CVERecord?id=CVE-2024-45801 Référence CVE CVE-2024-46982 https://www.cve.org/CVERecord?id=CVE-2024-46982 Référence CVE CVE-2024-47764 https://www.cve.org/CVERecord?id=CVE-2024-47764 Référence CVE CVE-2024-47874 https://www.cve.org/CVERecord?id=CVE-2024-47874 Référence CVE CVE-2024-47875 https://www.cve.org/CVERecord?id=CVE-2024-47875 Référence CVE CVE-2024-5535 https://www.cve.org/CVERecord?id=CVE-2024-5535 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6232 https://www.cve.org/CVERecord?id=CVE-2024-6232 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6923 https://www.cve.org/CVERecord?id=CVE-2024-6923 Référence CVE CVE-2024-7592 https://www.cve.org/CVERecord?id=CVE-2024-7592 Référence CVE CVE-2024-8088 https://www.cve.org/CVERecord?id=CVE-2024-8088 Gestion détaillée du document le 08 novembre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systè

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0923Multiples vulnérabilités dans les produits IBM

VERecord?id=CVE-2024-4067 Référence CVE CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 Référence CVE CVE-2024-41123 https://www.cve.org/CVERecord?id=CVE-2024-41123 Référence CVE CVE-2024-41784 https://www.cve.org/CVERecord?id=CVE-2024-41784 Référence CVE CVE-2024-41946 https://www.cve.org/CVERecord?id=CVE-2024-41946 Référence CVE CVE-2024-43398 https://www.cve.org/CVERecord?id=CVE-2024-43398 Référence CVE CVE-2024-45296 https://www.cve.org/CVERecord?id=CVE-2024-45296 Référence CVE CVE-2024-5569 https://www.cve.org/CVERecord?id=CVE-2024-5569 Référence CVE CVE-2024-6119 https://www.cve.org/CVERecord?id=CVE-2024-6119 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 25 octobre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0888Multiples vulnérabilités dans Oracle Weblogic

De multiples vulnérabilités ont été découvertes dans Oracle Weblogic. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0873Multiples vulnérabilités dans les produits IBM

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0797Multiples vulnérabilités dans les produits IBM

ecord?id=CVE-2024-26906 Référence CVE CVE-2024-26982 https://www.cve.org/CVERecord?id=CVE-2024-26982 Référence CVE CVE-2024-27267 https://www.cve.org/CVERecord?id=CVE-2024-27267 Référence CVE CVE-2024-34064 https://www.cve.org/CVERecord?id=CVE-2024-34064 Référence CVE CVE-2024-37891 https://www.cve.org/CVERecord?id=CVE-2024-37891 Référence CVE CVE-2024-38428 https://www.cve.org/CVERecord?id=CVE-2024-38428 Référence CVE CVE-2024-3933 https://www.cve.org/CVERecord?id=CVE-2024-3933 Référence CVE CVE-2024-4032 https://www.cve.org/CVERecord?id=CVE-2024-4032 Référence CVE CVE-2024-42472 https://www.cve.org/CVERecord?id=CVE-2024-42472 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 20 septembre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0780Multiples vulnérabilités dans les produits IBM

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0750Multiples vulnérabilités dans les produits IBM

ord?id=CVE-2024-39338 Référence CVE CVE-2024-39573 https://www.cve.org/CVERecord?id=CVE-2024-39573 Référence CVE CVE-2024-39689 https://www.cve.org/CVERecord?id=CVE-2024-39689 Référence CVE CVE-2024-39705 https://www.cve.org/CVERecord?id=CVE-2024-39705 Référence CVE CVE-2024-39884 https://www.cve.org/CVERecord?id=CVE-2024-39884 Référence CVE CVE-2024-4068 https://www.cve.org/CVERecord?id=CVE-2024-4068 Référence CVE CVE-2024-40725 https://www.cve.org/CVERecord?id=CVE-2024-40725 Référence CVE CVE-2024-40898 https://www.cve.org/CVERecord?id=CVE-2024-40898 Référence CVE CVE-2024-41110 https://www.cve.org/CVERecord?id=CVE-2024-41110 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Référence CVE CVE-2024-6387 https://www.cve.org/CVERecord?id=CVE-2024-6387 Gestion détaillée du document le 06 septembre 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0741Multiples vulnérabilités dans Juniper Secure Analytics

CVERecord?id=CVE-2024-35960 Référence CVE CVE-2024-36004 https://www.cve.org/CVERecord?id=CVE-2024-36004 Référence CVE CVE-2024-36007 https://www.cve.org/CVERecord?id=CVE-2024-36007 Référence CVE CVE-2024-3651 https://www.cve.org/CVERecord?id=CVE-2024-3651 Référence CVE CVE-2024-3652 https://www.cve.org/CVERecord?id=CVE-2024-3652 Référence CVE CVE-2024-38428 https://www.cve.org/CVERecord?id=CVE-2024-38428 Référence CVE CVE-2024-3933 https://www.cve.org/CVERecord?id=CVE-2024-3933 Référence CVE CVE-2024-42472 https://www.cve.org/CVERecord?id=CVE-2024-42472 Référence CVE CVE-2024-5564 https://www.cve.org/CVERecord?id=CVE-2024-5564 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 05 septembre 2024 Version initiale le 06 septembre 2024 Ajout référence éditeur le 15 octobre 2024 Correction d'identifiants CVE erronés Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0692Multiples vulnérabilités dans les produits IBM

ord?id=CVE-2024-33600 Référence CVE CVE-2024-33601 https://www.cve.org/CVERecord?id=CVE-2024-33601 Référence CVE CVE-2024-33602 https://www.cve.org/CVERecord?id=CVE-2024-33602 Référence CVE CVE-2024-34064 https://www.cve.org/CVERecord?id=CVE-2024-34064 Référence CVE CVE-2024-3651 https://www.cve.org/CVERecord?id=CVE-2024-3651 Référence CVE CVE-2024-37168 https://www.cve.org/CVERecord?id=CVE-2024-37168 Référence CVE CVE-2024-37890 https://www.cve.org/CVERecord?id=CVE-2024-37890 Référence CVE CVE-2024-37891 https://www.cve.org/CVERecord?id=CVE-2024-37891 Référence CVE CVE-2024-39008 https://www.cve.org/CVERecord?id=CVE-2024-39008 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 16 août 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
CERT-FR · French · CERTFR-2024-AVI-0670Multiples vulnérabilités dans Splunk Machine Learning Toolkit

CVERecord?id=CVE-2024-31580 Référence CVE CVE-2024-31583 https://www.cve.org/CVERecord?id=CVE-2024-31583 Référence CVE CVE-2024-34062 https://www.cve.org/CVERecord?id=CVE-2024-34062 Référence CVE CVE-2024-35195 https://www.cve.org/CVERecord?id=CVE-2024-35195 Référence CVE CVE-2024-3568 https://www.cve.org/CVERecord?id=CVE-2024-3568 Référence CVE CVE-2024-3651 https://www.cve.org/CVERecord?id=CVE-2024-3651 Référence CVE CVE-2024-3772 https://www.cve.org/CVERecord?id=CVE-2024-3772 Référence CVE CVE-2024-37891 https://www.cve.org/CVERecord?id=CVE-2024-37891 Référence CVE CVE-2024-5206 https://www.cve.org/CVERecord?id=CVE-2024-5206 Référence CVE CVE-2024-6345 https://www.cve.org/CVERecord?id=CVE-2024-6345 Gestion détaillée du document le 13 août 2024 Version initiale Alertes Avis Bulletins d’actualités Mentions légales Conditions générales À propos Contact cyber.gouv.fr service-public.fr legifrance.gouv.fr info.gouv.fr france.fr info.gouv.fr/risques Premier Ministre / Secrétariat Général de la Défense et de la Sécurité Nationale / Agence nationale de la sécurité des systèmes d'information

Official advisory
NCSC-NL · Dutch · NCSC-2024-0417Kwetsbaarheden verholpen in Oracle Fusion Middleware

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Manipuleren van data - Uitvoer van willekeurige code (Administratorrechten) - Toegang tot gevoelige gegevens Omdat deze kwetsbaarheden zich bevinden in diverse Middleware producten, is niet uit te sluiten dat applicaties, draaiende op platformen ondersteund door deze middleware ook kwetsbaar zijn, danwel gevoelig voor misbruik van deze kwetsbaarheden.

Official advisory
03

Patch and workaround

Operational remediation based on structured source evidence.

Status
?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Patch available
Affected
multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator; ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7; python-setuptools.src as a component of Red Hat Enterprise Linux 6; python2-setuptools as a component of Red Hat Enterprise Linux 8; python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8; python2-setuptools.src as a component of Red Hat Enterprise Linux 8; rhel9/bootc-image-builder.src as a component of Red Hat Enterprise Linux 9; rhel9/rhel-bootc.src as a component of Red Hat Enterprise Linux 9; odh-ml-pipelines-cache-container as a component of Red Hat OpenShift AI (RHOAI); odh-ml-pipelines-scheduledworkflow-container as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; rhods/odh-ml-pipelines-api-server-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-artifact-manager-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-cache-rhel8 as a component of Red Hat OpenShift Data Science (RHODS)
Fixed
python-setuptools-0:0.9.8-7.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python-setuptools-0:0.9.8-7.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3; quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3; quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3; quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3; quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3; quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3; quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3; and 2497 more
Action
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
Workaround
No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.
04

Evidence and provenance

Published 15 Jul 2024 · Last source change 4 Nov 2025, 16:15 UTC · CWE-94 · Improper Control of Generation of Code ('Code Injection')

CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source
?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.
FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2024-2330
Product sourceVendor CSAF · Red Hat Product Security
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD not scheduled

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates →
  1. Affected versionsThe structured affected or fixed version information changed.
    Before
    multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator; ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7; python-setuptools.src as a component of Red Hat Enterprise Linux 6; python2-setuptools as a component of Red Hat Enterprise Linux 8; python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8; python2-setuptools.src as a component of Red Hat Enterprise Linux 8; rhel9/bootc-image-builder.src as a component of Red Hat Enterprise Linux 9; rhel9/rhel-bootc.src as a component of Red Hat Enterprise Linux 9; odh-ml-pipelines-cache-container as a component of Red Hat OpenShift AI (RHOAI); odh-ml-pipelines-scheduledworkflow-container as a component of Red Hat OpenShift AI (RHOAI); openshift4/ztp-site-generate-rhel8 as a component of Red Hat OpenShift Container Platform 4; rhods/odh-ml-pipelines-api-server-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-artifact-manager-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-cache-rhel8 as a component of Red Hat OpenShift Data Science (RHODS) · Fixed: python-setuptools-0:0.9.8-7.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python-setuptools-0:0.9.8-7.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3; quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3; quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3; quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3; quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3; quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3; quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3; and 2497 more
    After
    multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator; ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7; python-setuptools.src as a component of Red Hat Enterprise Linux 6; python2-setuptools as a component of Red Hat Enterprise Linux 8; python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8; python2-setuptools.src as a component of Red Hat Enterprise Linux 8; rhel9/bootc-image-builder.src as a component of Red Hat Enterprise Linux 9; rhel9/rhel-bootc.src as a component of Red Hat Enterprise Linux 9; odh-ml-pipelines-cache-container as a component of Red Hat OpenShift AI (RHOAI); odh-ml-pipelines-scheduledworkflow-container as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; rhods/odh-ml-pipelines-api-server-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-artifact-manager-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-cache-rhel8 as a component of Red Hat OpenShift Data Science (RHODS) · Fixed: python-setuptools-0:0.9.8-7.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python-setuptools-0:0.9.8-7.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3; quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3; quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3; quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3; quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3; quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3; quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3; and 2497 more
    Red Hat Product Security ↗
  2. Affected versionsThe structured affected or fixed version information changed.
    Before
    multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator; ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7; python-setuptools.src as a component of Red Hat Enterprise Linux 6; python2-setuptools as a component of Red Hat Enterprise Linux 8; python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8; python2-setuptools.src as a component of Red Hat Enterprise Linux 8; rhel9/bootc-image-builder.src as a component of Red Hat Enterprise Linux 9; rhel9/rhel-bootc.src as a component of Red Hat Enterprise Linux 9; odh-ml-pipelines-cache-container as a component of Red Hat OpenShift AI (RHOAI); odh-ml-pipelines-scheduledworkflow-container as a component of Red Hat OpenShift AI (RHOAI); openshift4/ztp-site-generate-rhel8 as a component of Red Hat OpenShift Container Platform 4; rhods/odh-ml-pipelines-api-server-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-artifact-manager-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-cache-rhel8 as a component of Red Hat OpenShift Data Science (RHODS) · Fixed: python-setuptools-0:0.9.8-7.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python-setuptools-0:0.9.8-7.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3; quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3; quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3; quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3; quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3; quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3; quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3; and 2497 more
    After
    multiarch-tuning/multiarch-tuning-rhel9-operator.src as a component of Multiarch Tuning Operator; ansible-automation-platform-24/ansible-builder-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-dellemc-openmanage-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-cloud-services-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2; automation-controller.src as a component of Red Hat Ansible Automation Platform 2; rhceph/ceph-nvmeof-rhel9 as a component of Red Hat Ceph Storage 7; python-setuptools.src as a component of Red Hat Enterprise Linux 6; python2-setuptools as a component of Red Hat Enterprise Linux 8; python2-setuptools-wheel as a component of Red Hat Enterprise Linux 8; python2-setuptools.src as a component of Red Hat Enterprise Linux 8; rhel9/bootc-image-builder.src as a component of Red Hat Enterprise Linux 9; rhel9/rhel-bootc.src as a component of Red Hat Enterprise Linux 9; odh-ml-pipelines-cache-container as a component of Red Hat OpenShift AI (RHOAI); odh-ml-pipelines-scheduledworkflow-container as a component of Red Hat OpenShift AI (RHOAI); openshift4/ztp-site-generate-rhel8 as a component of Red Hat OpenShift Container Platform 4; rhods/odh-ml-pipelines-api-server-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-artifact-manager-rhel8 as a component of Red Hat OpenShift Data Science (RHODS); rhods/odh-ml-pipelines-cache-rhel8 as a component of Red Hat OpenShift Data Science (RHODS) · Fixed: python-setuptools-0:0.9.8-7.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python-setuptools-0:0.9.8-7.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3-setuptools-0:39.2.0-10.el7_9.1.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); quay/clair-rhel8@sha256:577458b6392e6519d032b389935665d7d198d3561db24074910f256c1fe4e3f1_amd64 as a component of Quay v3; quay/clair-rhel8@sha256:85afe4b0a4aa4d6d5b185fdfcf0b4ac3c999fa5318be5738239be16990897fe4_s390x as a component of Quay v3; quay/clair-rhel8@sha256:c512daee0b7f2fafe4d1124ecdd9fc6bb7a04619a77ebb3d64b2e0fcb51062e1_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:53e3ef86d08fb4947c945ceca7392b3e757cd988211d54cfc4d4b5372befef1b_ppc64le as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:cf0302d8cadde95626abab8491962e26f1a31d420721cad590f7845bdbfbb081_s390x as a component of Quay v3; quay/quay-bridge-operator-bundle@sha256:e365dff96148af07cd95571f7aef49cb57068b53bb8e59921388889b0b3b97e5_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:05ca3d6fd58aac396387197cc1794fe6a1500a5429964c56b23f5ef536b6ffad_amd64 as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:39243d53e33c55974ac3b070062c572039a4611ced2ba7a3f22b0919b04947a4_ppc64le as a component of Quay v3; quay/quay-bridge-operator-rhel8@sha256:96acd07bb43a0fe21dd788a815e0830feeee5aea434ee97288eb14da38aff034_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:6c5657557b1bde88e466b072537cc2c35513cd6cfb35d20343175454c0eef38a_amd64 as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:ae2b191f53bb9d87a66e609bd71cf7b264e3448d6097871bc590773b4c3ca557_s390x as a component of Quay v3; quay/quay-builder-qemu-rhcos-rhel8@sha256:c313b557b75742723228e84b1f25f1fe8bb234fa0b60abec5448ea0527e04076_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:18c7892e3091256b522749debca64e60bc62998513d617bf1e8f5baa11092a9e_amd64 as a component of Quay v3; quay/quay-builder-rhel8@sha256:535ca1e61bbbd33b58569f2cc38eb506641d277702ba4dd230a5093003c25718_ppc64le as a component of Quay v3; quay/quay-builder-rhel8@sha256:53e16de2dcff319c47d54bcbfb4612f4b6e071ca7e513a0571950ddbf4ce46a3_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:296a79bbfcc7d237a750bb3ba3d141a2e78ccda45a37da8cce668926a6d76a19_s390x as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:39452abef3641134972d119b67e30738efb89e96c30e6c8f98bce66ede4be03b_amd64 as a component of Quay v3; quay/quay-container-security-operator-bundle@sha256:cf7ca3537545ad9f71adf2d58e9037d947b5c307fb0a3aaf7196b05c00a8004b_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:23add71ac3591aedd2d4f868dd7fd3a9bf19667696750f82cb2479c5dc8d39d1_s390x as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:56fb1b958bdaa12f4b4dd4940f4fa75a44516e3e34cda47c3f03657c12afae03_ppc64le as a component of Quay v3; quay/quay-container-security-operator-rhel8@sha256:dba9ef1a15d269fd3a76483581ded14b52ca01190ad0a6591da9b2e4049baa5b_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:0b91cd4ec1a8344d3870eb2d7d7ee7a330f8024455e79f415f0fe533b0755994_ppc64le as a component of Quay v3; quay/quay-operator-bundle@sha256:9607e4d2493623608d8c7b578ff65cbece8e0b7f609b82f22858f9e313f4face_amd64 as a component of Quay v3; quay/quay-operator-bundle@sha256:b159f3721ce70c1fa11fa827cd3efa217e43d2ca57ac44838d3f445840461aef_s390x as a component of Quay v3; quay/quay-operator-rhel8@sha256:18004300f6c50d85c678ea97cfea1df36a9c075006b886c978c08ea611347e78_amd64 as a component of Quay v3; quay/quay-operator-rhel8@sha256:919422f820a70dca69a1918ea1f5540f04e524f1ba3620a04393f67ae3922369_s390x as a component of Quay v3; and 2497 more
    Red Hat Product Security ↗
Material fields only · duplicate refreshes suppressed · history retained for the configured operational retention period
CVE published
Fixed release or patch reference recorded
ENISA EUVD · EUVD-2024-2330↗Vendor CSAF · Red Hat Product Security↗CISA Vulnrichment SSVC evidence↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
Free version - for non-commercial use only.CVE-2024-6345 · cve.blacktree.nl