Homepage

Race Condition The advisory has been revoked - it doesn't affect any version of package python3.2  (opens in a new tab)

Threat Intelligence

EPSS
10.41% (96th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Race Condition vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-UBUNTU1204-PYTHON32-663396
  • published10 Sept 2020
  • disclosed19 Oct 2010
Report a new vulnerability Found a mistake?

Introduced: 19 Oct 2010

CVE-2010-3493  (opens in a new tab)
CWE-362  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream python3.2 package and not the python3.2 package as distributed by Ubuntu.

Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.

References