AZL-42796
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42796.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-42796
- Upstream
- Published
- 2024-06-17T16:15:10Z
- Modified
- 2026-04-21T04:30:45Z
- Summary
- CVE-2024-0397 affecting package python3 for versions less than 3.9.19-3
- Details
-
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.
- References