跳转到帖子

SUSE: CVE-2024-39705: SUSE Linux Security Advisory

recommended_posts

发布于
  • Members

SUSE: CVE-2024-39705: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
06/27/2024
Created
07/30/2024
Added
07/29/2024
Modified
07/29/2024

Description

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.

Solution(s)

  • suse-upgrade-python3-nltk

References

  • https://attackerkb.com/topics/cve-2024-39705
  • CVE - 2024-39705
  • 查看数 708
  • 已创建
  • 最后回复