CVE-2023-30608 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-30608 Interim 1 47 2026-03-05T03:43:22Z current 2023-04-19T23:16:52Z 2026-03-05T03:43:22Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-30608 sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2024-May/035270.html E-Mail link for SUSE-RU-2024:1637-1 https://lists.suse.com/pipermail/sle-updates/2024-June/035667.html E-Mail link for SUSE-RU-2024:1637-2 https://lists.suse.com/pipermail/sle-updates/2024-September/036891.html E-Mail link for SUSE-RU-2024:1637-3 https://lists.suse.com/pipermail/sle-updates/2023-June/029777.html E-Mail link for SUSE-SU-2023:2462-1 https://lists.suse.com/pipermail/sle-updates/2023-June/030016.html E-Mail link for SUSE-SU-2023:2619-1 https://lists.suse.com/pipermail/sle-updates/2023-June/030115.html E-Mail link for SUSE-SU-2023:2693-1 https://lists.suse.com/pipermail/sle-security-updates/2023-July/015453.html E-Mail link for SUSE-SU-2023:2787-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed python-sqlparse python-sqlparse-0.2.3-3.3.1 python-sqlparse-0.2.3-4.3.1 python2-sqlparse-0.2.4-150100.6.3.1 python3-sqlparse python3-sqlparse-0.4.2-150300.3.6.1 python310-sqlparse-0.4.4-1.1 python311-sqlparse-0.4.4-1.1 python311-sqlparse-0.4.4-150400.6.4.2 python311-sqlparse-0.4.4-150600.1.2 python313-sqlparse-0.5.3-160000.2.2 python39-sqlparse-0.4.4-1.1 python-sqlparse-0.2.3-3.3.1 as a component of HPE Helion OpenStack 8 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 python2-sqlparse-0.2.4-150100.6.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 python2-sqlparse-0.2.4-150100.6.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 python2-sqlparse-0.2.4-150100.6.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 python2-sqlparse-0.2.4-150100.6.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 python311-sqlparse-0.4.4-150400.6.4.2 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python311-sqlparse-0.4.4-150400.6.4.2 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 python311-sqlparse-0.4.4-150400.6.4.2 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 python311-sqlparse-0.4.4-150600.1.2 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 python3-sqlparse-0.4.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python311-sqlparse-0.4.4-150400.6.4.2 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python313-sqlparse-0.5.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python-sqlparse-0.2.3-3.3.1 as a component of SUSE OpenStack Cloud 8 python-sqlparse-0.2.3-4.3.1 as a component of SUSE OpenStack Cloud 9 python-sqlparse-0.2.3-3.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-sqlparse-0.2.3-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 9 python3-sqlparse-0.4.2-150300.3.6.1 as a component of openSUSE Leap 15.4 python3-sqlparse-0.4.2-150300.3.6.1 as a component of openSUSE Leap 15.5 python311-sqlparse-0.4.4-150400.6.4.2 as a component of openSUSE Leap 15.5 python311-sqlparse-0.4.4-150400.6.4.2 as a component of openSUSE Leap 15.6 python310-sqlparse-0.4.4-1.1 as a component of openSUSE Tumbleweed python311-sqlparse-0.4.4-1.1 as a component of openSUSE Tumbleweed python39-sqlparse-0.4.4-1.1 as a component of openSUSE Tumbleweed python3-sqlparse as a component of SUSE CaaS Platform 4.0 python-sqlparse as a component of SUSE CaaS Platform 4.0 python-sqlparse as a component of SUSE Enterprise Storage 7 python3-sqlparse as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python-sqlparse as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python3-sqlparse as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python-sqlparse as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python3-sqlparse as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-sqlparse as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python3-sqlparse as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python-sqlparse as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python3-sqlparse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-sqlparse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python3-sqlparse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python-sqlparse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. CVE-2023-30608 HPE Helion OpenStack 8:python-sqlparse-0.2.3-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:python2-sqlparse-0.2.4-150100.6.3.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-sqlparse-0.4.4-150400.6.4.2 SUSE Linux Enterprise Module for Public Cloud 15 SP5:python311-sqlparse-0.4.4-150400.6.4.2 SUSE Linux Enterprise Module for Public Cloud 15 SP6:python311-sqlparse-0.4.4-150400.6.4.2 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-sqlparse-0.4.4-150600.1.2 SUSE Linux Enterprise Real Time 15 SP3:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python3-sqlparse-0.4.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python311-sqlparse-0.4.4-150400.6.4.2 SUSE Linux Enterprise Server 16.0:python313-sqlparse-0.5.3-160000.2.2 SUSE OpenStack Cloud 8:python-sqlparse-0.2.3-3.3.1 SUSE OpenStack Cloud 9:python-sqlparse-0.2.3-4.3.1 SUSE OpenStack Cloud Crowbar 8:python-sqlparse-0.2.3-3.3.1 SUSE OpenStack Cloud Crowbar 9:python-sqlparse-0.2.3-4.3.1 openSUSE Leap 15.4:python3-sqlparse-0.4.2-150300.3.6.1 openSUSE Leap 15.5:python3-sqlparse-0.4.2-150300.3.6.1 openSUSE Leap 15.5:python311-sqlparse-0.4.4-150400.6.4.2 openSUSE Leap 15.6:python311-sqlparse-0.4.4-150400.6.4.2 openSUSE Tumbleweed:python310-sqlparse-0.4.4-1.1 openSUSE Tumbleweed:python311-sqlparse-0.4.4-1.1 openSUSE Tumbleweed:python39-sqlparse-0.4.4-1.1 moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H