CVE-2024-3219

EUVD-2024-31811
The
 “socket” module provides a pure-Python fallback to the 
socket.socketpair() function for platforms that don’t support AF_UNIX, 
such as Windows. This pure-Python implementation uses AF_INET or 
AF_INET6 to create a local connected pair of sockets. The connection 
between the two sockets was not verified before passing the two sockets 
back to the user, which leaves the server socket vulnerable to a 
connection race from a malicious local peer.

Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
python3.11
bookworm
3.11.2-6+deb12u6
fixed
bookworm (security)
3.11.2-6+deb12u3
fixed
python3.13
forky
3.13.11-1
fixed
sid
3.13.11-1
fixed
trixie
3.13.5-2
fixed
python3.9
bullseye
3.9.2-1
fixed
bullseye (security)
3.9.2-1+deb11u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
oracular
dne
trusty
not-affected
xenial
not-affected
python3.4
focal
dne
jammy
dne
noble
dne
oracular
dne
trusty
not-affected
python3.5
focal
dne
jammy
dne
noble
dne
oracular
dne
trusty
not-affected
xenial
not-affected
python3.6
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
python3.7
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
python3.8
bionic
not-affected
focal
not-affected
jammy
dne
noble
dne
oracular
dne
python3.9
focal
not-affected
jammy
dne
noble
dne
oracular
dne
python3.10
focal
dne
jammy
not-affected
noble
dne
oracular
dne
python3.11
focal
dne
jammy
not-affected
noble
dne
oracular
dne
python3.12
focal
dne
jammy
dne
noble
not-affected
oracular
not-affected
References