An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-maintainUpgrade rubygem-foreman_maintainUpgrade rubygem-oauth-ttyUpgrade satellite-cloneUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauthUpgrade rubygem-mime-types-dataUpgrade rubygem-netrcUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-domain_nameUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-fast_gettextUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cliUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debugsourceUpgrade rubygem-clampUpgrade rubygem-hashieUpgrade rubygem-ffi-debuginfoUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-version_gemUpgrade rubygem-ffiUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-loggingUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_bootdisk | Aug 4, 2023 | Dec 23, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Dec 23, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Rapid7 Agent | — | Upgrade to the latest version of Rapid7 Insight Agent | Sep 25, 2025 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade rubygem-apipie-bindingsUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleNo solution existsUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-oauthUpgrade rubygem-jwtUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-ffiUpgrade rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade rubygem-ffi-debuginfoUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapi | Aug 4, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.3Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.0.8Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.1.5 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python3-cursesUpgrade python3Upgrade python3-tkUpgrade python3-dbmUpgrade python3-baseUpgrade libpython3_4m1_0-32bitUpgrade python-futureUpgrade python3-develUpgrade libpython3_4m1_0Upgrade python3-future | Jan 13, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python-future (Ubuntu Pro)Upgrade python3-future (Ubuntu Pro)Upgrade python3-futureUpgrade python-future | Mar 22, 2023 | Dec 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub