Read the docs
TI-2024-06422 Aliases CVE-2024-6923GHSA-87qc-q3w7-7m8w

Email header injection due to unquoted newlines

Priority MEDIUM 60CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Partial Red Hat: 20 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-94.

Summary

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.011 65th percentileScored 2026-11-07
Fix Partial CPython (Python Software Foundation): 3.8.20, 3.9.20, 3.10.15 +3Red Hat: 16 advisoriesRed Hat: 20 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Python Software FoundationCPythonbefore 3.8.20; 3.9.0 to before 3.9.20; 3.10.0 to before 3.10.15; 3.11.0 to before 3.11.10; 3.12.0 to before 3.12.5; 3.13.0a1 to before 3.13.0rc23.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.5, 3.13.0rc2Patch availableCNA
  • CPython VendorPython Software Foundation Affected before 3.8.20; 3.9.0 to before 3.9.20; 3.10.0 to before 3.10.15; 3.11.0 to before 3.11.10; 3.12.0 to before 3.12.5; 3.13.0a1 to before 3.13.0rc2 Fixed in 3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.5, 3.13.0rc2 Patch available CNA

CPE names CISA-ADP · 1

CPEVersionsRoleVendor
cpe:2.3:a:python:cpython:*:*:*:*:*:*:*:*——python-pillow
  • cpe:2.3:a:python:cpython:*:*:*:*:*:*:*:* Versions — — ·python-pillow

Remediation

  • Fix · CNA CPython (Python Software Foundation) Fixed in 3.8.20, 3.9.20, 3.10.15, 3.11.10, 3.12.5, 3.13.0rc2

Red Hat 16 advisories

  • RHSA-2024:11109 Released 2024-12-16 · Red Hat rating Low
    Updated service-interconnect rhel9 container images for 1.5
    • Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
  • RHSA-2024:10135 Released 2024-11-21 · Red Hat rating Low
    Updated service-interconnect rhel9 container images for 1.4 LTS
    • 9Base-Service-Interconnect-1.4 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-flow-collector-rhel9, service-interconnect/skupper-operator-bundle +3
  • RHSA-2024:8103 Released 2024-10-15 · Red Hat rating Moderate
    python39:3.9 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-5.module+el8.7.0+16654+645aad7f.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
Show 13 more Red Hat advisories
  • RHSA-2024:7415 Released 2024-10-01 · Red Hat rating Moderate
    python3.11 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) python3.11-3.11.2-2.el9_2.6, python3.11-debug-3.11.2-2.el9_2.6, python3.11-idle-3.11.2-2.el9_2.6 +2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) python3.11-3.11.2-2.el9_2.6, python3.11-devel-3.11.2-2.el9_2.6, python3.11-libs-3.11.2-2.el9_2.6 +1
  • RHSA-2024:7374 Released 2024-09-30 · Red Hat rating Low
    Security update for service-interconnect rhel9 container images
    • Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
  • RHSA-2024:7213 Released 2024-09-26 · Red Hat rating Low
    Updated service-interconnect rhel9 container images for 1.4 LTS
    • 9Base-Service-Interconnect-1.4 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-flow-collector-rhel9, service-interconnect/skupper-operator-bundle +3
  • RHSA-2024:7137 Released 2024-09-25 · Red Hat rating Moderate
    python39:3.9 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
  • RHSA-2024:6975 Released 2024-09-24 · Red Hat rating Moderate
    python3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-67.el8_10, platform-python-debug-3.6.8-67.el8_10, platform-python-devel-3.6.8-67.el8_10 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-67.el8_10, python3-3.6.8-67.el8_10, python3-libs-3.6.8-67.el8_10 +1
  • RHSA-2024:6962 Released 2024-09-24 · Red Hat rating Moderate
    python3.11 security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3.11-3.11.9-7.el8_10, python3.11-devel-3.11.9-7.el8_10, python3.11-libs-3.11.9-7.el8_10 +2
    • Red Hat Enterprise Linux CRB (v. 8) python3.11-3.11.9-7.el8_10, python3.11-debug-3.11.9-7.el8_10, python3.11-idle-3.11.9-7.el8_10 +2
  • RHSA-2024:6961 Released 2024-09-24 · Red Hat rating Moderate
    python3.12 security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.5-2.el8_10, python3.12-devel-3.12.5-2.el8_10, python3.12-libs-3.12.5-2.el8_10 +2
    • Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.5-2.el8_10, python3.12-debug-3.12.5-2.el8_10, python3.12-idle-3.12.5-2.el8_10 +2
  • RHSA-2024:6909 Released 2024-09-23 · Red Hat rating Important
    python3.9 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) python3-3.9.16-1.el9_2.8, python3-debug-3.9.16-1.el9_2.8, python3-idle-3.9.16-1.el9_2.8 +2
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) python-unversioned-command-3.9.16-1.el9_2.8, python3-devel-3.9.16-1.el9_2.8, python3-tkinter-3.9.16-1.el9_2.8
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) python3-3.9.16-1.el9_2.8, python3-libs-3.9.16-1.el9_2.8, python3.9-3.9.16-1.el9_2.8
  • RHSA-2024:6915 Released 2024-09-23 · Red Hat rating Moderate
    python39:3.9 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
  • RHSA-2024:6179 Released 2024-09-03 · Red Hat rating Moderate
    python3.11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.7-1.el9_4.5, python3.11-devel-3.11.7-1.el9_4.5, python3.11-libs-3.11.7-1.el9_4.5 +1
    • Red Hat Enterprise Linux CRB (v. 9) python3.11-3.11.7-1.el9_4.5, python3.11-debug-3.11.7-1.el9_4.5, python3.11-idle-3.11.7-1.el9_4.5 +2
  • RHSA-2024:6163 Released 2024-09-03 · Red Hat rating Moderate
    python3.9 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.18-3.el9_4.5, python3-devel-3.9.18-3.el9_4.5, python3-tkinter-3.9.18-3.el9_4.5
    • Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.18-3.el9_4.5, python3-libs-3.9.18-3.el9_4.5, python3.9-3.9.18-3.el9_4.5
    • Red Hat Enterprise Linux CRB (v. 9) python3-3.9.18-3.el9_4.5, python3-debug-3.9.18-3.el9_4.5, python3-idle-3.9.18-3.el9_4.5 +2
  • RHSA-2024:6146 Released 2024-09-03 · Red Hat rating Moderate
    python3.12 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.12-3.12.1-4.el9_4.3, python3.12-devel-3.12.1-4.el9_4.3, python3.12-libs-3.12.1-4.el9_4.3 +1
    • Red Hat Enterprise Linux CRB (v. 9) python3.12-3.12.1-4.el9_4.3, python3.12-debug-3.12.1-4.el9_4.3, python3.12-idle-3.12.1-4.el9_4.3 +2
  • RHSA-2024:5962 Released 2024-08-28 · Red Hat rating Moderate
    python39:3.9 and python39-devel:3.9 security update
    • Red Hat Enterprise Linux AppStream (v. 8) PyYAML-5.4.1-1.module+el8.9.0+19644+d68f775d.src::python39:3.9, mod_wsgi-4.7.1-7.module+el8.9.0+19644+d68f775d.src::python39:3.9, numpy-1.19.4-3.module+el8.9.0+19644+d68f775d.src::python39:3.9 +47
    • Red Hat Enterprise Linux CRB (v. 8) Cython-0.29.21-5.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9 +33

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
9Base-Service-Interconnect-1.4Fixed RHSA-2024:10135, RHSA-2024:7213
RHOAI-2.13-RHEL-8Fixed—
RHOAI-2.14-RHEL-8Fixed—
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2024:6909, RHSA-2024:7415
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:5962, RHSA-2024:6961, RHSA-2024:6962, RHSA-2024:6975
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:6146, RHSA-2024:6163, RHSA-2024:6179
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:7137
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2024:6915
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:7137
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2024:6915
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:8103
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:6909, RHSA-2024:7415
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:7137
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2024:6915
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:6975
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:6163
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2024:6909
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2024:5962, RHSA-2024:6961, RHSA-2024:6962
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2024:6146, RHSA-2024:6163, RHSA-2024:6179
Red Hat Service Interconnect 1Fixed RHSA-2024:11109, RHSA-2024:7374
Not affected: 2 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6923
  2. 2026-10-03 Alias added: GHSA-87qc-q3w7-7m8w
  3. 2026-10-30 Fix available: RHOAI-2.13-RHEL-8, RHOAI-2.14-RHEL-8 · Red Hat

References

Patch 8

Advisory 1

Other 1

  • TI-2024-07037 Quadratic complexity parsing cookies with backslashes CVSS 3.1HIGH 7.5
  • TI-2024-11791 Bypass extraction filter to modify file metadata outside extraction directory CVSS 3.1MEDIUM 5.3
  • TI-2024-00411 Quoted zip-bomb protection for zipfile CVSS 3.1MEDIUM 6.2
  • TI-2026-13296 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching CVSS 4.0MEDIUM 6.0
  • TI-2026-04606 Possible to hijack modules in current working directory CVSS 4.0MEDIUM 5.6
  • TI-2025-07587 ZIP64 End of Central Directory (EOCD) Locator record offset not checked CVSS 3.1MEDIUM 4.3
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences