PT-2024-24457 · Python+1 · Cpython+1

Ellie + 1 · Published 2024-07-29 · Updated 2025-05-02 · CVE-2024-3219

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions CPython versions 3.5 through latest

Description The issue arises from the "socket" module's pure-Python fallback for the socket.socketpair() function on platforms that don't support AF UNIX, such as Windows. This implementation uses AF INET or AF INET6 to create a local connected pair of sockets. However, the connection between the two sockets is not verified before being passed back to the user, leaving the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF UNIX, like Linux and macOS, are not affected.

Recommendations For CPython versions 3.5 and later, consider disabling the socket.socketpair() function until a patch is available to prevent potential exploitation. Restrict access to the "socket" module to minimize the risk of a connection race from a malicious local peer. Avoid using the AF INET or AF INET6 protocols in the socket.socketpair() function on Windows platforms until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

ALT-PU-2024-12993

ALT-PU-2024-14497

CVE-2024-3219

OESA-2024-2190

OESA-2024-2191

OESA-2024-2192

OESA-2024-2193

PSF-2024-7

Affected Products

Alt Linux

Cpython

References · 40

• https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6c · Patch
• https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20 · Patch
• https://github.com/python/cpython/pull/122134 · Patch
• https://github.com/python/cpython/commit/b252317956b7fc035bb3774ef6a177e227f9fc54 · Patch
• https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2 · Patch
• https://github.com/python/cpython/commit/5f90abaa786f994db3907fc31e2ee00ea2cf0929 · Patch
• https://github.com/python/cpython/commit/78df1043dbdce5c989600616f9f87b4ee72944e5 · Patch
• https://github.com/python/cpython/commit/c21a36112a0028d7ac3cf8f480e0dc88dba5922c · Patch
• https://github.com/python/cpython/commit/3f5d9d12c74787fbf3f5891835c85cc15526c86d · Patch
• https://github.com/python/cpython/commit/2621a8a40ba4b2c68ca564671b7daa5da80a4508 · Patch
• https://github.com/python/cpython/commit/c5655aa6ad120d2ed7f255bebd6e8b71a9c07dde · Patch
• https://github.com/python/cpython/commit/5df322e91a40909e6904bbdbc0c3a6b6a9eead39 · Patch
• https://github.com/python/cpython/commit/31302f5fc24eecd693f0c8aaba7c2840b09b594d · Patch
• https://github.com/python/cpython/commit/f071f01b7b7e19d7d6b3a4b0ec62f820ecb14660 · Patch
• https://github.com/python/cpython/commit/e319f774f9e766a2b92949444a2d46081df3363a · Patch