CVE-2024-3219

NameCVE-2024-3219
DescriptionThe “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
pypy (PTS)jessie2.4.0+dfsg-3fixed
stretch5.6.0+dfsg-4fixed
buster7.0.0+dfsg-3fixed
bullseye7.3.3+dfsg-2fixed
python2.7 (PTS)jessie, jessie (lts)2.7.9-2-ds1-1+deb8u12fixed
stretch (security)2.7.13-2+deb9u6fixed
stretch (lts), stretch2.7.13-2+deb9u9fixed
buster (security), buster, buster (lts)2.7.16-2+deb10u4fixed
bullseye2.7.18-8+deb11u1fixed
python3.11 (PTS)bookworm3.11.2-6+deb12u4fixed
bookworm (security)3.11.2-6+deb12u3fixed
python3.12 (PTS)sid, trixie3.12.7-3fixed
python3.13 (PTS)sid, trixie3.13.0-2fixed
python3.4 (PTS)jessie, jessie (lts)3.4.2-1+deb8u18fixed
python3.5 (PTS)stretch (security)3.5.3-1+deb9u5fixed
stretch (lts), stretch3.5.3-1+deb9u10fixed
python3.7 (PTS)buster, buster (lts)3.7.3-2+deb10u8fixed
buster (security)3.7.3-2+deb10u7fixed
python3.9 (PTS)bullseye3.9.2-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
pypysource(unstable)(not affected)
python2.7source(unstable)(not affected)
python3.11source(unstable)(not affected)
python3.12source(unstable)(not affected)
python3.13source(unstable)(not affected)
python3.4source(unstable)(not affected)
python3.5source(unstable)(not affected)
python3.7source(unstable)(not affected)
python3.9source(unstable)(not affected)

Notes

- python3.13 <not-affected> (Windows-specific)
- python3.12 <not-affected> (Windows-specific)
- python3.11 <not-affected> (Windows-specific)
- python3.9 <not-affected> (Windows-specific)
- python2.7 <not-affected> (Vulnerable code not present)
https://github.com/python/cpython/pull/122134
https://github.com/python/cpython/issues/122133
https://www.openwall.com/lists/oss-security/2024/07/29/3
3.9-branch: https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20
3.10-branch: https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2
3.11-branch: https://github.com/python/cpython/commit/5f90abaa786f994db3907fc31e2ee00ea2cf0929
3.12-branch: https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6c
3.13-branch: https://github.com/python/cpython/commit/b252317956b7fc035bb3774ef6a177e227f9fc54
Only affects plattforms which do not support AF_UNIX.
- pypy <not-affected> (Vulnerable code not present)
- python3.4 <not-affected> (Vulnerable code not present)
- python3.5 <not-affected> (Windows-specific)
- python3.7 <not-affected> (Windows-specific)

Search for package or bug name: Reporting problems