CVE-2024-6232

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A medium severity vulnerability in CPython where regular expressions allow excessive backtracking during tarfile.TarFile header parsing, leading to ReDoS via specially crafted tar archives.

Risk Assessment

An attacker can cause significant slowdown or hang of applications processing malicious tar archives, leading to denial of service.

Recommendation

Update CPython to a version that fixes regular expression handling in tarfile, and avoid processing untrusted tar archives.

Original NVD description (English source)

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.