CVE-2010-3492

Python < 2.7 - Denial of Service via asyncore accept Function

Title source: llm
STIX 2.1

Description

The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.

References (8)

Core 8
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/09/11/2
Patch, Vendor Advisory x_refsource_confirm
http://bugs.python.org/issue6706
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:216
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/09/24/3
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/09/22/3
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/09/09/6
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

Scores

EPSS 0.0136
EPSS Percentile 80.4%

Details

Status published
Products (1)
python/python < 2.7
Published Oct 19, 2010
Tracked Since Feb 18, 2026