CVE-2010-3493

Python: SMTP proxy RFC 2821 module DoS (uncaught exception) (Issue #9129)

Published Oct 19, 2010 CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Description
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-3491 Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
Ubuntu USN Ubuntu USN USN-1314-1 Python 3 vulnerabilities
Ubuntu USN Ubuntu USN USN-1596-1 Python 2.6 vulnerabilities
Ubuntu USN Ubuntu USN USN-1613-1 Python 2.5 vulnerabilities
Ubuntu USN Ubuntu USN USN-1613-2 Python 2.4 vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:11 AM
Reserved
Sep 24, 2010, 12:00 AM
Status
Modified
Published
Oct 19, 2010, 8:00 PM
Modified
Jun 16, 2026, 11:22 PM
Severity
Low
Public date
Jun 30, 2010, 12:00 AM