BIT-LIBPYTHON-2024-0397 Memory race condition in ssl.SSLContext certificate store methods

🗓️ 11 Aug 2025 13:52:34Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Memory race in ssl.SSLContext cert_store_stats and get_ca_certs during cert loading; fixed in CPython 3.10.14,3.11.9,3.12.3,3.13.0a5.

Reporter	Title	Published	Views	Family All 192
IBM Security Bulletins	Security Bulletin: AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032, CVE-2024-37891) due to Python	17 Sep 202423:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Python	28 Mar 202522:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	7 Nov 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	7 Nov 202516:42	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in packages shipped with IBM CICS TX Advanced	25 Oct 202414:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	1 Oct 202515:31	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2024-699)	6 Aug 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2024-788)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python3 (ALAS-2025-2766)	26 Feb 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python38 (ALASPYTHON3.8-2024-016)	13 Nov 202400:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/06/17/2
github	www.github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d
github	www.github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524
github	www.github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e
github	www.github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286
github	www.github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa
github	www.github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab
github	www.github.com/python/cpython/issues/114572
github	www.github.com/python/cpython/pull/114573
mail	www.mail.python.org/archives/list/[email protected]/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/

11 May 2026 18:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.4

EPSS0.00804

SSVC