CVE-2023-6507
published 2023-12-08CVE-2023-6507: An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases…
PriorityP426medium4.9CVSS 3.1
AVNACLPRHUINSUCNIHAN
EPSS
1.33%
67.8th percentile
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.
When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list.
This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | python2.7 | — | — |
| debian | python3.11 | — | — |
| debian | python3.9 | — | — |
| msrc | azl3_python3_3.12.0-4_on_azure_linux_3.0 | — | — |
| msrc | azl3_python3_3.12.3-1_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| python | python | — | — |
| python | python | — | — |
| python_software_foundation | cpython | >= 3.12.0 < 3.12.1 | 3.12.1 |
| python_software_foundation | cpython | >= 3.13.0a1 < 3.13.0a3 | 3.13.0a3 |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
osv7.6HIGH
vendor_ubuntu7.6HIGH
vendor_debian6.1LOW
vendor_msrc6.1MEDIUM
vendor_redhat6.1MEDIUM
vendor_oracle4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Python vulnerabilities
vendor_ubuntu·2024-07-11·CVSS 7.6
CVE-2021-29921 [HIGH] Python vulnerabilities
Title: Python vulnerabilities
Summary: Several security issues were fixed in Python.
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.
(CVE-2015-20107)
It was discovered that Python incorrectly used regular expressions
vulnerable to catastrophic backtracking. A remote attacker could possibly
use this issue to cause a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)
It was discovered that Python failed to initialize Expat’s hash salt. A
remote attacker could possibly use this issue to cause hash collisions,
leading to a denial of service. This issue only affected Ubuntu 14.04 LTS.
(CVE-2018-14647)
Oracle
Oracle Oracle Communications Risk Matrix: Third Party (Python) — CVE-2023-6507
vendor_oracle·2024-04-15·CVSS 4.9
CVE-2023-6507 [MEDIUM] Oracle Oracle Communications Risk Matrix: Third Party (Python) — CVE-2023-6507
Oracle Oracle Communications Risk Matrix: Third Party (Python) vulnerability
CVE: CVE-2023-6507
CVSS: 4.9
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
Microsoft
Groups not dropped before running subprocess when using empty 'extra_groups' parameter
vendor_msrc·2023-12-12·CVSS 6.1
CVE-2023-6507 [MEDIUM] CWE-269 Groups not dropped before running subprocess when using empty 'extra_groups' parameter
Groups not dropped before running subprocess when using empty 'extra_groups' parameter
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
PSF: PSF
Customer Action Required: Yes
Remediation: CBL-Mariner Release
Red Hat
python: Improper privileges drop on subprocess module
vendor_redhat·2023-12-08·CVSS 6.1
CVE-2023-6507 [MEDIUM] CWE-269 python: Improper privileges drop on subprocess module
python: Improper privileges drop on subprocess module
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.
When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list.
This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
A flaw was found in Python's subprocess module. When creating a new subprocess, the developer may specify a
Debian
CVE-2023-6507: python2.7 - An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The...
vendor_debian·2023·CVSS 6.1
CVE-2023-6507 [MEDIUM] CVE-2023-6507: python2.7 - An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The...
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
Scope: local
bullseye: resolved
OSV
python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
osv·2024-07-11·CVSS 7.6
CVE-2015-20107 [HIGH] python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.
(CVE-2015-20107)
It was discovered that Python incorrectly used regular expressions
vulnerable to catastrophic backtracking. A remote attacker could possibly
use this issue to cause a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)
It was discovered that Python failed to initialize Expat’s hash salt. A
remote attacker could possibly use this issue to cause hash collisions,
leading to a denial of service. This issue only affected Ubuntu 14.04 L
OSV
CVE-2023-6507: An issue was found in CPython 3
osv·2023-12-08·CVSS 4.9
CVE-2023-6507 [MEDIUM] CVE-2023-6507: An issue was found in CPython 3
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
GHSA
GHSA-4wxh-fpjf-c8wf: An issue was found in CPython 3
ghsa_unreviewed·2023-12-08
CVE-2023-6507 [MEDIUM] CWE-269 GHSA-4wxh-fpjf-c8wf: An issue was found in CPython 3
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.
When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list.
This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
No detection rules found.
No public exploits indexed.
https://github.com/python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82bhttps://github.com/python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06https://github.com/python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610https://github.com/python/cpython/issues/112334https://mail.python.org/archives/list/[email protected]/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/https://github.com/python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82bhttps://github.com/python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06https://github.com/python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610https://github.com/python/cpython/issues/112334https://mail.python.org/archives/list/[email protected]/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/
2023-12-08
Published