{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Python ist eine universelle, \u00fcblicherweise interpretierte, h\u00f6here Programmiersprache.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um Sicherheitsmechanismen zu umgehen oder andere Auswirkungen zu erzielen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-2173 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2173.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-2173 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2173"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2023:6885 vom 2024-01-12",
        "url": "https://lists.centos.org/pipermail/centos-announce/2024-January/099189.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2023:6823 vom 2024-01-12",
        "url": "https://lists.centos.org/pipermail/centos-announce/2024-January/099186.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7108657 vom 2024-01-17",
        "url": "https://www.ibm.com/support/pages/node/7108657"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:0784-1 vom 2024-03-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018103.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:0785-1 vom 2024-03-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018102.html"
      },
      {
        "category": "external",
        "summary": "Python Security-Announce Mailing List vom 2023-08-24",
        "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-2222 vom 2023-09-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2222.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1816 vom 2023-09-11",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1816.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3575 vom 2023-09-20",
        "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3708-1 vom 2023-09-20",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016252.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3730-1 vom 2023-09-22",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016293.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3731-1 vom 2023-09-22",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016292.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3804-1 vom 2023-09-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016347.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3824-1 vom 2023-09-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016368.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3828-1 vom 2023-09-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016364.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASPYTHON3.8-2023-010 vom 2023-09-27",
        "url": "https://alas.aws.amazon.com/AL2/ALASPYTHON3.8-2023-010.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3933-1 vom 2023-10-02",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016476.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3939-1 vom 2023-10-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016481.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3943-1 vom 2023-10-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016497.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5472 vom 2023-10-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:5472"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5462 vom 2023-10-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:5462"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5463 vom 2023-10-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:5463"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5456 vom 2023-10-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:5456"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20231006-0014 vom 2023-10-06",
        "url": "https://security.netapp.com/advisory/ntap-20231006-0014/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5528 vom 2023-10-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:5528"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5531 vom 2023-10-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:5531"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3614 vom 2023-10-11",
        "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5463 vom 2023-10-16",
        "url": "https://oss.oracle.com/pipermail/el-errata/2023-October/014753.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5463 vom 2023-10-16",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5463.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5456 vom 2023-10-16",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5456.html"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX24-004 vom 2024-03-04",
        "url": "https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox%C2%AE-Security-Bulletin-XRX24-004-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v7.pdf"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX24-005 vom 2024-03-04",
        "url": "https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5462 vom 2023-10-18",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5462.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:3828-2 vom 2023-10-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016756.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5997 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5997"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5998 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5998"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5995 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5995"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5991 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5991"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5994 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5994"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5996 vom 2023-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:5996"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6069 vom 2023-10-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:6069"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6068 vom 2023-10-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:6068"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5997 vom 2023-10-25",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5997.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5994 vom 2023-10-25",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5994.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-5998 vom 2023-10-26",
        "url": "http://linux.oracle.com/errata/ELSA-2023-5998.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5992 vom 2023-10-28",
        "url": "https://access.redhat.com/errata/RHSA-2023:5992"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6290 vom 2023-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2023:6290"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1876 vom 2023-11-03",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1876.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5993 vom 2023-11-04",
        "url": "https://access.redhat.com/errata/RHSA-2023:5993"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5990 vom 2023-11-04",
        "url": "https://access.redhat.com/errata/RHSA-2023:5990"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6823 vom 2023-11-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:6823"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6793 vom 2023-11-08",
        "url": "https://access.redhat.com/errata/RHSA-2023:6793"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-6823 vom 2023-11-09",
        "url": "https://linux.oracle.com/errata/ELSA-2023-6823.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6885 vom 2023-11-13",
        "url": "https://access.redhat.com/errata/RHSA-2023:6885"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-6885 vom 2023-11-13",
        "url": "https://linux.oracle.com/errata/ELSA-2023-6885.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-7034 vom 2023-11-21",
        "url": "https://linux.oracle.com/errata/ELSA-2023-7034.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-7042 vom 2023-11-21",
        "url": "https://linux.oracle.com/errata/ELSA-2023-7042.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6513-1 vom 2023-11-23",
        "url": "https://ubuntu.com/security/notices/USN-6513-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6513-2 vom 2023-11-27",
        "url": "https://ubuntu.com/security/notices/USN-6513-2"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202405-01 vom 2024-05-04",
        "url": "https://security.gentoo.org/glsa/202405-01"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-198 vom 2024-05-08",
        "url": "https://www.dell.com/support/kbdoc/000224827/dsa-2024-="
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K000139685 vom 2024-05-21",
        "url": "https://my.f5.com/manage/s/article/K000139685"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6891-1 vom 2024-07-11",
        "url": "https://ubuntu.com/security/notices/USN-6891-1"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-239 vom 2024-07-18",
        "url": "https://www.dell.com/support/kbdoc/de-de/000227051/dsa-2024-239-security-update-dell-ecs-3-8-1-1-for-multiple-security-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7167111 vom 2024-09-03",
        "url": "https://www.ibm.com/support/pages/node/7167111"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3980 vom 2024-12-02",
        "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Python: Schwachstelle erm\u00f6glicht Umgehung von Sicherheitsmechanismen",
    "tracking": {
      "current_release_date": "2024-12-01T23:00:00.000+00:00",
      "generator": {
        "date": "2024-12-02T11:34:11.589+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2023-2173",
      "initial_release_date": "2023-08-24T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-08-24T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-09-10T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-09-20T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Debian und SUSE aufgenommen"
        },
        {
          "date": "2023-09-24T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-09-27T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE und Amazon aufgenommen"
        },
        {
          "date": "2023-10-01T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-10-03T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-10-05T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-08T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2023-10-09T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-11T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-10-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-10-18T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-10-19T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-10-23T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-24T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2023-10-26T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-10-29T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-02T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-05T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Amazon und Red Hat aufgenommen"
        },
        {
          "date": "2023-11-08T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-09T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-11-13T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2023-11-21T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-11-23T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-11-27T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-01-14T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von CentOS aufgenommen"
        },
        {
          "date": "2024-01-16T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-03-03T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2024-03-06T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-05-05T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2024-05-07T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-05-21T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von F5 aufgenommen"
        },
        {
          "date": "2024-07-11T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-07-18T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-09-03T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-12-01T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Debian aufgenommen"
        }
      ],
      "status": "final",
      "version": "37"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.8.1.1",
                "product": {
                  "name": "Dell ECS \u003c3.8.1.1",
                  "product_id": "T036366"
                }
              },
              {
                "category": "product_version",
                "name": "3.8.1.1",
                "product": {
                  "name": "Dell ECS 3.8.1.1",
                  "product_id": "T036366-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:dell:ecs:3.8.1.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ECS"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "virtual",
                "product": {
                  "name": "Dell NetWorker virtual",
                  "product_id": "T034583",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC Avamar",
            "product": {
              "name": "EMC Avamar",
              "product_id": "T014381",
              "product_identification_helper": {
                "cpe": "cpe:/a:emc:avamar:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "17.1.0-17.1.1",
                "product": {
                  "name": "F5 BIG-IP 17.1.0-17.1.1",
                  "product_id": "T034899",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:17.1.0_-_17.1.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "16.1.0-16.1.4",
                "product": {
                  "name": "F5 BIG-IP 16.1.0-16.1.4",
                  "product_id": "T034901",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:16.1.0_-_16.1.4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.1.0-15.1.10",
                "product": {
                  "name": "F5 BIG-IP 15.1.0-15.1.10",
                  "product_id": "T034902",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:15.1.0_-_15.1.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "category": "product_name",
            "name": "IBM Security Guardium",
            "product": {
              "name": "IBM Security Guardium",
              "product_id": "T021345",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_guardium:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T016960",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.11.5",
                "product": {
                  "name": "Open Source Python \u003c3.11.5",
                  "product_id": "T029558"
                }
              },
              {
                "category": "product_version",
                "name": "3.11.5",
                "product": {
                  "name": "Open Source Python 3.11.5",
                  "product_id": "T029558-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:python:python:3.11.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.10.13",
                "product": {
                  "name": "Open Source Python \u003c3.10.13",
                  "product_id": "T029559"
                }
              },
              {
                "category": "product_version",
                "name": "3.10.13",
                "product": {
                  "name": "Open Source Python 3.10.13",
                  "product_id": "T029559-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:python:python:3.10.13"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.9.18",
                "product": {
                  "name": "Open Source Python \u003c3.9.18",
                  "product_id": "T029560"
                }
              },
              {
                "category": "product_version",
                "name": "3.9.18",
                "product": {
                  "name": "Open Source Python 3.9.18",
                  "product_id": "T029560-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:python:python:3.9.18"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c3.8.18",
                "product": {
                  "name": "Open Source Python \u003c3.8.18",
                  "product_id": "T029561"
                }
              },
              {
                "category": "product_version",
                "name": "3.8.18",
                "product": {
                  "name": "Open Source Python 3.8.18",
                  "product_id": "T029561-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:python:python:3.8.18"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Python"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T015631",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v9",
                "product": {
                  "name": "Xerox FreeFlow Print Server v9",
                  "product_id": "T015632",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-40217",
      "notes": [
        {
          "category": "description",
          "text": "Es gibt eine Schwachstelle in Python. Dieser Fehler ist auf eine Race-Condition in der SSLSocket-Implementierung zur\u00fcckzuf\u00fchren. Wenn ein Socket geschlossen wird, bevor der TLS Handshake abgeschlossen ist, kann der Socket immer noch Daten lesen. Diese Daten werden so behandelt, als w\u00e4ren sie mit TLS verschl\u00fcsselt worden, obwohl der Handshake nie abgeschlossen wurde. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen oder andere Effekte zu erzielen, die von der verwendeten Python-Implementierung abh\u00e4ngen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T034899",
          "T029561",
          "T029560",
          "67646",
          "T034902",
          "T034901",
          "T034583",
          "T036366",
          "T015632",
          "T012167",
          "T015631",
          "T004914",
          "T016960",
          "T022954",
          "T021345",
          "T014381",
          "2951",
          "T002207",
          "T000126",
          "T029559",
          "398363",
          "T029558",
          "1727"
        ]
      },
      "release_date": "2023-08-24T22:00:00.000+00:00",
      "title": "CVE-2023-40217"
    }
  ]
}