BIT-python-min-2024-0397

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2024-0397.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-python-min-2024-0397
Aliases
Published
2025-01-17T15:06:36Z
Modified
2026-05-11T18:30:24Z
Summary
Memory race condition in ssl.SSLContext certificate store methods
Details

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.

Database specific 
{
    "cpes": [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / python-min

Package

Name
python-min
Purl
pkg:bitnami/python-min

Severity

  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.8.20
Introduced
3.9.0
Fixed
3.9.20
Introduced
3.10.0
Fixed
3.10.14
Introduced
3.11.0
Fixed
3.11.9
Introduced
3.12.0
Fixed
3.12.3

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2024-0397.json"