CVE-2024-0397
Fixed in a distro release EPSS <1%CVSS 7.4
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | python3 | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-debug | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-devel | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-libs | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-test | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-tkinter | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2 | python3-tools | 3.7.16-1.amzn2.0.13 |
| Amazon Linux 2023 | python-unversioned-command | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3 | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-debug | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-devel | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-idle | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-libs | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-test | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3-tkinter | 3.9.16-1.amzn2023.0.9 |
| Amazon Linux 2023 | python3.11 | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-debug | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-devel | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-idle | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-libs | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-test | 3.11.6-1.amzn2023.0.5 |
| Amazon Linux 2023 | python3.11-tkinter | 3.11.6-1.amzn2023.0.5 |
| Chainguard | python-3.9 | 3.9.19-r2 |
| Debian 11 | python3.9 | 3.9.2-1+deb11u2 |
| Debian 12 | pypy3 | no fix |
| Debian 12 | python3.11 | 3.11.2-6+deb12u3 |
| Debian 13 | pypy3 | 7.3.16+dfsg-1 |
| Debian 14 | pypy3 | 7.3.16+dfsg-1 |
| Red Hat Enterprise Linux 9 | python-unversioned-command | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3 | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-debug | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-devel | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-idle | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-libs | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-test | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3-tkinter | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3.11 | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-debug | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-debuginfo | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-debugsource | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-devel | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-idle | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-libs | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-test | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.11-tkinter | 0:3.11.9-7.el9 |
| Red Hat Enterprise Linux 9 | python3.12 | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-debug | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-debuginfo | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-debugsource | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-devel | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-idle | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-libs | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-test | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.12-tkinter | 0:3.12.5-2.el9 |
| Red Hat Enterprise Linux 9 | python3.9 | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3.9-debuginfo | 0:3.9.21-1.el9_5 |
| Red Hat Enterprise Linux 9 | python3.9-debugsource | 0:3.9.21-1.el9_5 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy | 3.11.9-1.26.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-core | 3.11.9-1.26.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-cryptography | 3.3.2-1.18.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-docker | 7.0.0-1.8.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-idna | 3.4-1.9.2 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-passlib | 1.7.4-1.3.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-passlib-test | 1.7.4-1.3.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-setuptools | 67.7.2-1.12.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-urllib3 | 2.0.7-1.12.1 |
| SUSE EL-9 Update Products SaltBundle Update | saltbundlepy-zipp | 3.15.0-1.9.2 |
| SUSE EL-9 Update Products SaltBundle Update | venv-salt-minion | 3006.0-1.47.1 |
| SUSE Enterprise Storage 7.1 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Enterprise Storage 7.1 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Micro 5.1 | python3 | 3.6.15-150000.3.150.1 |
| SUSE Linux Enterprise Micro 5.1 | python3-core | 3.6.15-150000.3.150.1 |
| SUSE Linux Enterprise Micro 5.2 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Micro 5.2 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Micro 5.3 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Micro 5.3 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Micro 5.4 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Micro 5.4 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Micro 5.5 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Micro 5.5 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | python311-core | 3.11.9-150600.3.3.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | python39 | 3.9.19-150300.4.46.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | python39-core | 3.9.19-150300.4.46.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python311 | 3.11.9-150600.3.3.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python311-core | 3.11.9-150600.3.3.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python312 | 3.12.4-150600.3.3.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP6 | python312-core | 3.12.4-150600.3.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | python36 | 3.6.15-58.1 |
| SUSE Linux Enterprise Server 12 SP5 | python36-core | 3.6.15-58.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36 | 3.6.15-58.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36-core | 3.6.15-58.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python36-core | 3.6.15-58.1 |
| SUSE Linux Micro 6.0 | python311 | 3.11.8-3.1 |
| SUSE Linux Micro 6.0 | python311 | 3.11.11-1.1 |
| SUSE Linux Micro 6.0 | python311-core | 3.11.8-3.1 |
| SUSE Linux Micro 6.0 | python311-core | 3.11.11-1.1 |
| SUSE Linux Micro 6.1 | python311 | 3.11.12-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | python311-core | 3.11.12-slfo.1.1_1.1 |
| SUSE Manager Client Tools 12 | venv-salt-minion | 3006.0-3.65.1 |
| SUSE Manager Client Tools 15 | venv-salt-minion | 3006.0-150000.3.67.1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS | venv-salt-minion | 3006.0-1.47.1 |
| SUSE Manager Client Tools for SLE Micro 5 | venv-salt-minion | 3006.0-150000.3.67.1 |
| SUSE Manager Proxy 4.3 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Manager Proxy 4.3 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Manager Proxy Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 |
| SUSE Manager Server 4.3 | python3 | 3.6.15-150300.10.65.2 |
| SUSE Manager Server 4.3 | python3-core | 3.6.15-150300.10.65.1 |
| SUSE Manager Server Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 |
| Ubuntu 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.11 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.5 |
| Ubuntu Pro 14.04 LTS | python2.7 | no fix |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 16.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | no fix |
| Ubuntu Pro 18.04 LTS | python3.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python2.7 | no fix |
| Ubuntu Pro 20.04 LTS | python3.9 | no fix |
| Ubuntu Pro 22.04 LTS | python2.7 | no fix |
| Ubuntu Pro 22.04 LTS | python3.11 | no fix |
| openSUSE Leap 15.5 | python3 | 3.6.15-150300.10.65.2 |
| openSUSE Leap 15.5 | python3-core | 3.6.15-150300.10.65.1 |
| openSUSE Leap 15.5 | python3-documentation | 3.6.15-150300.10.65.1 |
| openSUSE Leap 15.5 | python39 | 3.9.19-150300.4.46.1 |
| openSUSE Leap 15.5 | python39-core | 3.9.19-150300.4.46.1 |
| openSUSE Leap 15.5 | python39-documentation | 3.9.19-150300.4.46.1 |
| openSUSE Leap 15.6 | python3 | 3.6.15-150300.10.65.2 |
| openSUSE Leap 15.6 | python3-core | 3.6.15-150300.10.65.1 |
| openSUSE Leap 15.6 | python3-documentation | 3.6.15-150300.10.65.1 |
| openSUSE Leap 15.6 | python311 | 3.11.9-150600.3.3.1 |
| openSUSE Leap 15.6 | python311-core | 3.11.9-150600.3.3.1 |
| openSUSE Leap 15.6 | python311-documentation | 3.11.9-150600.3.3.1 |
| openSUSE Leap 15.6 | python312 | 3.12.4-150600.3.3.1 |
| openSUSE Leap 15.6 | python312-core | 3.12.4-150600.3.3.1 |
| openSUSE Leap 15.6 | python312-documentation | 3.12.4-150600.3.3.1 |
| openSUSE Leap 15.6 | python39 | 3.9.19-150300.4.46.1 |
| openSUSE Leap 15.6 | python39-core | 3.9.19-150300.4.46.1 |
| openSUSE Leap 15.6 | python39-documentation | 3.9.19-150300.4.46.1 |
| openSUSE Leap Micro 5.3 | python3 | 3.6.15-150300.10.65.2 |
| openSUSE Leap Micro 5.3 | python3-core | 3.6.15-150300.10.65.1 |
| openSUSE Leap Micro 5.4 | python3 | 3.6.15-150300.10.65.2 |
| openSUSE Leap Micro 5.4 | python3-core | 3.6.15-150300.10.65.1 |
| openSUSE Tumbleweed | python310 | 3.10.14-2.1 |
| openSUSE Tumbleweed | python311 | 3.11.9-3.1 |
| openSUSE Tumbleweed | python312 | 3.12.5-1.1 |
| openSUSE Tumbleweed | python38 | 3.8.19-3.1 |
| openSUSE Tumbleweed | python39 | 3.9.19-2.1 |