CVE-2024-3219: fallo de gravedad media en Python Software Foundation CPython
Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.1epss 0.2%
The
“socket” module provides a pure-Python fallback to the
socket.socketpair() function for platforms that don’t support AF_UNIX,
such as Windows. This pure-Python implementation uses AF_INET or
AF_INET6 to create a local connected pair of sockets. The connection
between the two sockets was not verified before passing the two sockets
back to the user, which leaves the server socket vulnerable to a
connection race from a malicious local peer.
Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Python Software Foundation · CPythonCVEs relacionadas — Python Software Foundation CPython
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-7592HIGHQuadratic complexity parsing cookies with backslashesEPSS 2.3%CVE-2024-6232HIGHRegular-expression DoS when parsing TarFile headersEPSS 2.2%CVE-2024-12254HIGHUnbounded memory buffering in SelectorSocketTransport.writelines()EPSS 1.9%CVE-2025-13836MEDIUMExcessive read buffering DoS in http.clientEPSS 1.7%CVE-2025-0938MEDIUMURL parser allowed square brackets in domain namesEPSS 1.6%CVE-2025-4138HIGHBypassing extraction filter to create symlinks to arbitrary targets outside extraction directoryEPSS 1.5%
Referencias
https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6chttps://github.com/python/cpython/commit/2621a8a40ba4b2c68ca564671b7daa5da80a4508https://github.com/python/cpython/commit/31302f5fc24eecd693f0c8aaba7c2840b09b594dhttps://github.com/python/cpython/commit/3f5d9d12c74787fbf3f5891835c85cc15526c86dhttps://github.com/python/cpython/commit/5df322e91a40909e6904bbdbc0c3a6b6a9eead39https://github.com/python/cpython/commit/5f90abaa786f994db3907fc31e2ee00ea2cf0929https://github.com/python/cpython/commit/78df1043dbdce5c989600616f9f87b4ee72944e5https://github.com/python/cpython/commit/b252317956b7fc035bb3774ef6a177e227f9fc54https://github.com/python/cpython/commit/c21a36112a0028d7ac3cf8f480e0dc88dba5922chttps://github.com/python/cpython/commit/c5655aa6ad120d2ed7f255bebd6e8b71a9c07dde