CVE-2023-41105: High severity Python Python vulnerability
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
Other sources
Python could allow a local authenticated attacker to bypass security restrictions, caused by a flaw with os.path.normpath truncates input on null bytes. By sending a specially crafted request, an attacker could exploit this vulnerability to allow wrong files or directories being used,.
— IBM
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-41105?
CVE-2023-41105 is a vulnerability in Python 3.11 through 3.11.4 that allows a path containing '\0' bytes to be truncated unexpectedly at the first '\0' byte.
How does CVE-2023-41105 affect Python?
CVE-2023-41105 affects Python versions 3.11 through 3.11.4.
What is the severity of CVE-2023-41105?
CVE-2023-41105 has a severity rating of 7.5 out of 10.
How can CVE-2023-41105 be exploited?
CVE-2023-41105 can be exploited by passing a path containing '\0' bytes to the os.path.normpath() function in Python.
Is there a patch available for CVE-2023-41105?
Yes, patches are available for Python versions 3.11 through 3.11.4 to address CVE-2023-41105.