Lucene search
+L

256 matches found

Github Security Blog
Github Security Blog
added 2025/08/26 9:40 p.m.11 views

Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start

Summary Using asyncio.unixevents.UnixSubprocessTransport.start function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

7.9AI score
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-12254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not pause writing and signal to the Protocol to drain the buffer to the...

8.7CVSS8AI score0.0188EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/11 1:52 p.m.8 views

BIT-LIBPYTHON-2024-12254 Unbounded memory buffering in SelectorSocketTransport.writelines()

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

8.7CVSS7.2AI score0.0188EPSS
SaveExploits0References9
OSV
OSV
added 2025/07/03 7:47 p.m.3 views

BELL-CVE-2025-38098

Bulletin has no description...

5.5CVSS6.2AI score0.00159EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2025/02/06 8:2 p.m.13 views

K000149683: Python asyncio vulnerability CVE-2024-12254

Security Advisory Description Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodicall...

8.7CVSS7.9AI score0.0188EPSS
SaveExploits0
OSV
OSV
added 2025/02/06 12:33 p.m.159 views

BIT-PYTHON-2024-12254 Unbounded memory buffering in SelectorSocketTransport.writelines()

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

8.7CVSS7.6AI score0.0188EPSS
SaveExploits0References9
OSV
OSV
added 2025/02/06 12:33 p.m.9 views

BIT-PYTHON-MIN-2024-12254 Unbounded memory buffering in SelectorSocketTransport.writelines()

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

8.7CVSS7.6AI score0.0188EPSS
SaveExploits0References9
Amazon
Amazon
added 2025/01/24 12:0 a.m.6 views

Important: python3.12

Issue Overview: Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the...

8.7CVSS7.9AI score0.0188EPSS
SaveExploits0
Amazon
Amazon
added 2025/01/24 12:0 a.m.9 views

Important: python3.12

Issue Overview: Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the...

8.7CVSS7.9AI score0.0188EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/01/21 12:0 a.m.8 views

Ubuntu 24.04 LTS / 24.10 : Python vulnerability (USN-7219-1)

The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7219-1 advisory. It was discovered that Python incorrectly handled asyncio write buffers. A remote attacker could possibly use this issue to cause Python to consume memory...

8.7CVSS7.8AI score0.0188EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/20 3:13 p.m.6 views

USN-7219-1 python3.12 vulnerability

It was discovered that Python incorrectly handled asyncio write buffers. A remote attacker could possibly use this issue to cause Python to consume memory, leading to a denial of service...

8.7CVSS6.9AI score0.0188EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2025/01/20 3:13 p.m.154 views

USN-7219-1: Python vulnerability

It was discovered that Python incorrectly handled asyncio write buffers. A remote attacker could possibly use this issue to cause Python to consume memory, leading to a denial of service...

8.7CVSS7.6AI score0.0188EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.7 views

The vulnerability of the `asyncio._SelectorSocketTransport.writelines()` method in the Python programming language, which allows a hacker to cause a denial-of-service attack

The vulnerability of the asyncio.SelectorSocketTransport.writelines method in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.2AI score0.0188EPSS
SaveExploits0References7Affected Software3
Redos
Redos
added 2025/01/10 12:0 a.m.14 views

ROS-20250110-10

A vulnerability in the asyncio.SelectorSocketTransport.writelines function of the Python programming language is associated with an uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of service denial of service...

8.7CVSS6.6AI score0.0188EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/12/13 9:19 a.m.5 views

python: Unbounded memory buffering in SelectorSocketTransport.writelines()

A flaw was found in Python. In certain configurations, the asyncio.SelectorSocketTransport.writelines method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denia...

8.7CVSS7.2AI score0.0188EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/12/12 8:42 a.m.5 views

python: Unbounded memory buffering in SelectorSocketTransport.writelines()

A flaw was found in Python. In certain configurations, the asyncio.SelectorSocketTransport.writelines method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denia...

8.7CVSS7.2AI score0.0188EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2024/12/07 4:6 a.m.6 views

SUSE CVE-2024-12254

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

7.5CVSS8.3AI score0.0188EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2024/12/06 11:19 p.m.14 views

CVE-2024-12254

A flaw was found in Python. In certain configurations, the asyncio.SelectorSocketTransport.writelines method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denia...

7.5CVSS6.3AI score0.0188EPSS
SaveExploits0References6
NVD
NVD
added 2024/12/06 4:15 p.m.11 views

CVE-2024-12254

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

8.7CVSS0.0188EPSS
SaveExploits0References8
OSV
OSV
added 2024/12/06 4:15 p.m.6 views

ALPINE-CVE-2024-12254

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

8.7CVSS8.6AI score0.0188EPSS
SaveExploits0References1
Rows per page
Query Builder