Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2024-8088

Published Aug 22, 2024 CWE-835 EPSS 1.27% (68th pctl)

Overview

CVE-2024-8088 is a known-severity vulnerability. It was published on August 22, 2024.

Technical Description

There is a HIGH severity vulnerability affecting the CPython "zipfile"

module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.

When iterating over names of entries in a zip archive (for example, methods

of "zipfile.Path" like "namelist()", "iterdir()", etc)

the process can be put into an infinite loop with a maliciously crafted

zip archive. This defect applies when reading only metadata or extracting

the contents of the zip archive. Programs that are not handling

user-controlled zip archives are not affected.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

GitHub github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1 GitHub github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6 GitHub github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e GitHub github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814 GitHub github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4 GitHub github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64 GitHub github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a GitHub github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7 GitHub github.com/python/cpython/commit/9cd03263100ddb1657826cc4a71470786cab3932 GitHub github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea

Frequently Asked Questions

What is CVE-2024-8088?

CVE-2024-8088 is a known-severity vulnerability. It was published on August 22, 2024.

How severe is CVE-2024-8088?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2024-8088?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2024-8088?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-8088 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.
Browse by year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999