Summary
It was discovered that Python incorrectly handled asyncio write buffers. A
remote attacker could possibly use this issue to cause Python to consume
memory, leading to a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | python3.12 | 3.12.3-1ubuntu0.4 |
Vulnerabilities 1
-
High 8.7
Unbounded memory buffering in SelectorSocketTransport.writelines()
Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not …
References
-
report
https://ubuntu.com/security/CVE-2024-12254