An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-jwtUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-mime-types-dataUpgrade satellite-cloneUpgrade rubygem-snaky_hashUpgrade rubygem-netrcUpgrade rubygem-rest-clientUpgrade satellite-maintainUpgrade rubygem-oauth-ttyUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-version_gemUpgrade rubygem-powerbarUpgrade rubygem-http-acceptUpgrade rubygem-hashieUpgrade rubygem-ffi-debugsourceUpgrade rubygem-clampUpgrade rubygem-http-cookieUpgrade rubygem-ffi-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-cliUpgrade rubygem-ffiUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-unf_ext | Aug 4, 2023 | Dec 23, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Dec 23, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Rapid7 Agent | — | Upgrade to the latest version of Rapid7 Insight Agent | Sep 25, 2025 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-foreman_maintainUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-netrcUpgrade python39-pulp_manifestUpgrade rubygem-clampUpgrade rubygem-version_gemUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-ffi-debuginfoUpgrade satellite-maintainUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-rest-clientUpgrade rubygem-unf_extUpgrade rubygem-ffiUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade rubygem-mime-types-dataNo solution existsUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unfUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-http-cookieUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-display_widthUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-domain_nameUpgrade rubygem-oauthUpgrade rubygem-snaky_hashUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-mime-typesUpgrade rubygem-amazing_print | Aug 4, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.0.8Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.1.3 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade libpython3_4m1_0-32bitUpgrade python3-futureUpgrade libpython3_4m1_0Upgrade python3-develUpgrade python3-baseUpgrade python-futureUpgrade python3-dbmUpgrade python3-cursesUpgrade python3Upgrade python3-tk | Jan 13, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python-future (Ubuntu Pro)Upgrade python3-future (Ubuntu Pro)Upgrade python3-futureUpgrade python-future | Mar 22, 2023 | Dec 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub