CVE-2024-3219
published 2024-07-29CVE-2024-3219: The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This…
PriorityP424medium5.1CVSS 4.0
AVLACLATNPRNUINVCLVINVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.25%
16.0th percentile
The
“socket” module provides a pure-Python fallback to the
socket.socketpair() function for platforms that don’t support AF_UNIX,
such as Windows. This pure-Python implementation uses AF_INET or
AF_INET6 to create a local connected pair of sockets. The connection
between the two sockets was not verified before passing the two sockets
back to the user, which leaves the server socket vulnerable to a
connection race from a malicious local peer.
Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | python2.7 | — | — |
| debian | python3.11 | — | — |
| debian | python3.13 | — | — |
| debian | python3.9 | — | — |
| python_software_foundation | cpython | < 3.8.20 | 3.8.20 |
| python_software_foundation | cpython | >= 3.10.0 < 3.10.15 | 3.10.15 |
| python_software_foundation | cpython | >= 3.11.0 < 3.11.10 | 3.11.10 |
| python_software_foundation | cpython | >= 3.12.0 < 3.12.5 | 3.12.5 |
| python_software_foundation | cpython | >= 3.13.0a1 < 3.13.0rc1 | 3.13.0rc1 |
| python_software_foundation | cpython | >= 3.9.0 < 3.9.20 | 3.9.20 |
CVSS provenance
nvdv4.05.1MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv5.1MEDIUM
vendor_debian5.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r8h6-cwxj-rv5j: There is a MEDIUM severity vulnerability affecting CPython
ghsa_unreviewed·2024-07-30
CVE-2024-3219 [LOW] CWE-306 GHSA-r8h6-cwxj-rv5j: There is a MEDIUM severity vulnerability affecting CPython
There is a MEDIUM severity vulnerability affecting CPython.
The
“socket” module provides a pure-Python fallback to the
socket.socketpair() function for platforms that don’t support AF_UNIX,
such as Windows. This pure-Python implementation uses AF_INET or
AF_INET6 to create a local connected pair of sockets. The connection
between the two sockets was not verified before passing the two sockets
back to the user, which leaves the server socket vulnerable to a
connection race from a malicious local peer.
Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
OSV
CVE-2024-3219: There is a MEDIUM severity vulnerability affecting CPython
osv·2024-07-29·CVSS 5.1
CVE-2024-3219 [MEDIUM] CVE-2024-3219: There is a MEDIUM severity vulnerability affecting CPython
There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
Debian
CVE-2024-3219: python2.7 - The “socket” module provides a pure-Python fallback to the socket.socketpair()...
vendor_debian·2024·CVSS 5.1
CVE-2024-3219 [MEDIUM] CVE-2024-3219: python2.7 - The “socket” module provides a pure-Python fallback to the socket.socketpair()...
The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
Scope: local
bullseye: resolved
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2024/07/29/3https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6chttps://github.com/python/cpython/commit/2621a8a40ba4b2c68ca564671b7daa5da80a4508https://github.com/python/cpython/commit/31302f5fc24eecd693f0c8aaba7c2840b09b594dhttps://github.com/python/cpython/commit/3f5d9d12c74787fbf3f5891835c85cc15526c86dhttps://github.com/python/cpython/commit/5df322e91a40909e6904bbdbc0c3a6b6a9eead39https://github.com/python/cpython/commit/5f90abaa786f994db3907fc31e2ee00ea2cf0929https://github.com/python/cpython/commit/78df1043dbdce5c989600616f9f87b4ee72944e5https://github.com/python/cpython/commit/b252317956b7fc035bb3774ef6a177e227f9fc54https://github.com/python/cpython/commit/c21a36112a0028d7ac3cf8f480e0dc88dba5922chttps://github.com/python/cpython/commit/c5655aa6ad120d2ed7f255bebd6e8b71a9c07ddehttps://github.com/python/cpython/commit/e319f774f9e766a2b92949444a2d46081df3363ahttps://github.com/python/cpython/commit/f071f01b7b7e19d7d6b3a4b0ec62f820ecb14660https://github.com/python/cpython/issues/122133https://github.com/python/cpython/pull/122134https://mail.python.org/archives/list/[email protected]/thread/WYKDQWIERRE2ICIYMSVRZJO33GSCWU2B/http://www.openwall.com/lists/oss-security/2024/07/29/3https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6chttps://github.com/python/cpython/commit/5f90abaa786f994db3907fc31e2ee00ea2cf0929https://github.com/python/cpython/commit/b252317956b7fc035bb3774ef6a177e227f9fc54https://github.com/python/cpython/issues/122133https://github.com/python/cpython/pull/122134https://mail.python.org/archives/list/[email protected]/thread/WYKDQWIERRE2ICIYMSVRZJO33GSCWU2B/https://security.netapp.com/advisory/ntap-20250502-0004/
2024-07-29
Published