CVE-2023-40217: Race Condition
First published: Fri Aug 25 2023(Updated: )
Python could allow a remote attacker to bypass security restrictions, caused by a race condition in the SSLSocket module. When the socket is closed before the TLS handshake is complete, the data is treated as if it had been encrypted by TLS. An attacker could exploit this vulnerability to bypass the TLS handshake and inject a malicious client certificate into the connection and gain access to the server’s resources without being authenticated.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Python Python | <3.8.18 | |
| Python Python | >=3.9.0<3.9.18 | |
| Python Python | >=3.10.0<3.10.13 | |
| Python Python | >=3.11.0<3.11.5 | |
| ubuntu/python2.7 | <2.7.17-1~18.04ubuntu1.13+ | 2.7.17-1~18.04ubuntu1.13+ |
| ubuntu/python2.7 | <2.7.6-8ubuntu0.6+ | 2.7.6-8ubuntu0.6+ |
| ubuntu/python2.7 | <2.7.12-1ubuntu0~16.04.18+ | 2.7.12-1ubuntu0~16.04.18+ |
| ubuntu/python3.10 | <3.10.13-1 | 3.10.13-1 |
| ubuntu/python3.10 | <3.10.12-1~22.04.3 | 3.10.12-1~22.04.3 |
| ubuntu/python3.11 | <3.11.5-1 | 3.11.5-1 |
| ubuntu/python3.11 | <3.11.4-1~23.04.1 | 3.11.4-1~23.04.1 |
| ubuntu/python3.12 | <3.12 | 3.12 |
| ubuntu/python3.9 | <3.9.18 | 3.9.18 |
| ubuntu/python3.5 | <3.5.2-2ubuntu0~16.04.13+ | 3.5.2-2ubuntu0~16.04.13+ |
| ubuntu/python3.6 | <3.6.9-1~18.04ubuntu1.13+ | 3.6.9-1~18.04ubuntu1.13+ |
| ubuntu/python3.8 | <3.8.10-0ubuntu1~20.04.9 | 3.8.10-0ubuntu1~20.04.9 |
| redhat/Python | <3.11.5 | 3.11.5 |
| redhat/Python | <3.10.13 | 3.10.13 |
| redhat/Python | <3.9.18 | 3.9.18 |
| redhat/Python | <3.8.18 | 3.8.18 |
| IBM QRadar SIEM | <=7.5 - 7.5.0 UP7 | |
| debian/pypy3 | <=7.0.0+dfsg-3<=7.3.5+dfsg-2+deb11u2<=7.3.11+dfsg-2+deb12u1 | 7.3.15+dfsg-1 |
| debian/python2.7 | <=2.7.16-2+deb10u1 | 2.7.16-2+deb10u3 2.7.18-8+deb11u1 |
| debian/python3.10 | 3.10.13-1 | |
| debian/python3.11 | <=3.11.2-6 | 3.11.8-1 3.11.8-3 |
| debian/python3.12 | 3.12.2-1 3.12.2-4 | |
| debian/python3.7 | <=3.7.3-2+deb10u3 | 3.7.3-2+deb10u6 |
| debian/python3.9 | <=3.9.2-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://exchange.xforce.ibmcloud.com/vulnerabilities/264374
- https://www.ibm.com/support/pages/node/7108657 (Advisory)
- https://mail.python.org/archives/list/security-announce@python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
- https://www.python.org/dev/security/
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20231006-0014/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://launchpad.net/bugs/cve/CVE-2023-40217
- https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
- https://nvd.nist.gov/vuln/detail/CVE-2023-40217
- https://access.redhat.com/security/cve/CVE-2023-40217
- https://access.redhat.com/errata/RHSA-2023:5456
- https://access.redhat.com/errata/RHSA-2023:5462
- https://access.redhat.com/errata/RHSA-2023:5463
- https://access.redhat.com/errata/RHSA-2023:5472
- https://access.redhat.com/errata/RHSA-2023:5528
- https://access.redhat.com/errata/RHSA-2023:5531
- https://access.redhat.com/errata/RHSA-2023:5990
- https://access.redhat.com/errata/RHSA-2023:5991
- https://access.redhat.com/errata/RHSA-2023:5992
- https://access.redhat.com/errata/RHSA-2023:5993
- https://access.redhat.com/errata/RHSA-2023:5995
- https://access.redhat.com/errata/RHSA-2023:5996
- https://access.redhat.com/errata/RHSA-2023:5994
- https://access.redhat.com/errata/RHSA-2023:5998
- https://access.redhat.com/errata/RHSA-2023:5997
- https://access.redhat.com/errata/RHSA-2023:6069
- https://access.redhat.com/errata/RHSA-2023:6068
- https://issues.redhat.com/browse/CONTOOLSQE-2898
- https://access.redhat.com/errata/RHSA-2023:6290
- https://access.redhat.com/errata/RHSA-2023:6793
- https://access.redhat.com/errata/RHSA-2023:6823
- https://access.redhat.com/errata/RHSA-2023:6885
- https://bugzilla.redhat.com/show_bug.cgi?id=2235789
- https://github.com/python/cpython/issues/108310
- https://github.com/python/cpython/pull/108315
- https://github.com/python/cpython/commit/0cb0c238d520a8718e313b52cffc356a5a7561bf
- https://github.com/python/cpython/commit/256586ab8776e4526ca594b4866b9a3492e628f1
- https://github.com/python/cpython/commit/75a875e0df0530b75b1470d797942f90f4a718d3
- https://github.com/python/cpython/commit/37d7180cb647f0bed0c1caab0037f3bc82e2af96
- https://github.com/python/cpython/commit/264b1dacc67346efa0933d1e63f622676e0ed96b
- https://github.com/python/cpython/commit/64f99350351bc46e016b2286f36ba7cd669b79e3
- https://github.com/python/cpython/commit/592bacb6fc0833336c0453e818e9b95016e9fd47
- https://security-tracker.debian.org/tracker/CVE-2023-40217
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217
- https://github.com/python/cpython/commit/0cb0c238d520a8718e313b52cffc356a5a7561bf (main)
- https://github.com/python/cpython/commit/256586ab8776e4526ca594b4866b9a3492e628f1 (3.12)
- https://github.com/python/cpython/commit/75a875e0df0530b75b1470d797942f90f4a718d3 (3.11)
- https://github.com/python/cpython/commit/37d7180cb647f0bed0c1caab0037f3bc82e2af96 (3.10)
- https://github.com/python/cpython/commit/264b1dacc67346efa0933d1e63f622676e0ed96b (3.9)
- https://ubuntu.com/security/notices/USN-6513-1
- https://ubuntu.com/security/notices/USN-6513-2
- https://ubuntu.com/security/CVE-2023-40217
Frequently Asked Questions
What is CVE-2023-40217?
CVE-2023-40217 is a vulnerability discovered in Python versions before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5.
Who is affected by CVE-2023-40217?
Servers (such as HTTP servers) that use TLS client authentication are primarily affected by CVE-2023-40217.
What is the severity of CVE-2023-40217?
CVE-2023-40217 has a severity level of 5.3 (medium).
How can I fix CVE-2023-40217?
To fix CVE-2023-40217, it is recommended to update Python to versions 3.8.18, 3.9.18, 3.10.13, or 3.11.5.
Where can I find more information about CVE-2023-40217?
You can find more information about CVE-2023-40217 on the following references: [Link 1](https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html), [Link 2](https://mail.python.org/archives/list/security-announce@python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/), [Link 3](https://www.python.org/dev/security/).
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-api
- collector/nvd-cve
- source/NVD
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-40217
- collector/security-tracker-debian
- source/Debian
- collector/usn-cve
- source/Ubuntu
- vendor/ibm
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5 - 7.5.0 up7
- vendor/python
- canonical/python python
- version/python python/3.9.0
- version/python python/3.10.0
- version/python python/3.11.0
- package-manager/redhat
- package-manager/debian
- package-manager/ubuntu