CVE-2024-0397

highpriority · track · 0EPSS 0.008 · 56 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.81% (56th) EPSS

CVSS 7.4 · high

Is it mine?

186 products

Check your exposure

Who says so?

8 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-22

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
FixedRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibpython3_11-1_0-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-base-32bit-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-curses-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-dbm-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-devel-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-doc-devhelp-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-idle-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-testsuite-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tk-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.s390x as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Python 3 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython311-tools-3.11.9-150600.3.3.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.4

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.8–7.4

v3.17.4highAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · ENISA EU

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondaryexploitability 2.2 · impact 5.2

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · Siemens ProductCERT DE

v3.16.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.14.8mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Lsecondary · SUSE Product Security

v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USCWE-362USCWE-362USCWE-362US

affected products (186)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell NetWorkerall versionscert_bundDEcpe:/a:dell:networker:-
EMC Avamarall versionscert_bundDEcpe:/a:emc:avamar:-
F5 BIG-IPall versionscert_bundDEcpe:/a:f5:big-ip:-
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
IBM AIX 7.3all versionscert_bundDEcpe:/o:ibm:aix:7.3
IBM App Connect Enterprise <12.0.16all versionscert_bundDE
IBM App Connect Enterprise <12.16.0all versionscert_bundDE
IBM FlashSystemall versionscert_bundDEcpe:/a:ibm:flashsystem:-
IBM InfoSphere Information Server 11.7all versionscert_bundDEcpe:/a:ibm:infosphere_information_server:11.7
IBM QRadar SIEM <7.5.0 UP10 IF01all versionscert_bundDE
IBM SAN Volume Controllerall versionscert_bundDEcpe:/a:ibm:san_volume_controller:-
IBM SPSSall versionscert_bundDEcpe:/a:ibm:spss:modeler
IBM Storwizeall versionscert_bundDEcpe:/a:ibm:storwize:-
IBM VIOS 4.1all versionscert_bundDEcpe:/a:ibm:vios:4.1
NetApp ActiveIQ Unified Manager for Microsoft Windowsall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_microsoft_windows
NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
Open Source Python <3.10.14all versionscert_bundDE
Open Source Python <3.11.9all versionscert_bundDE

showing 20 of 186

advisories (14)

Vendor and ecosystem advisories describing this.

NCSC-2024-0291 Kwetsbaarheden verholpen in Oracle Database ServerNL2024-07-17csaf · ncsc_nlNL
Er zijn kwetsbaarheden verholpen in Oracle Database Server.
NCSC-2024-0339Kwetsbaarheden verholpen in Microsoft MarinerNL2024-08-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in Mariner (Azure Linux).
NCSC-2025-0021Kwetsbaarheden verholpen in Oracle CommunicationsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communicatieproducten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function en Oracle Communications Order and Service Management.
NCSC-2025-0023Kwetsbaarheden verholpen in Oracle PeopleSoftNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle PeopleSoft, specifiek in de versies 8.60, 8.61 en 9.2.
NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
SUSE-SU-2024:2982-1Security update for python3112024-08-20csaf · suse_csafDE
Security update for python311
WID-SEC-W-2024-1396Python: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und Umgehung von SicherheitsmaßnahmenDeutsch2024-06-17csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Dateien zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
WID-SEC-W-2024-1645Oracle Database Server: Mehrere SchwachstellenDeutsch2024-07-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Database Server ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2025-0225Dell PowerProtect Data Domain: Mehrere SchwachstellenDeutsch2025-01-30csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain ausnutzen, um erhöhte Rechte zu erlangen, einen Denial-of-Service-Zustand herbeizuführen und einen nicht näher spezifizierten Angriff durchzuführen.
BIT-libpython-2024-0397Memory race condition in ssl.SSLContext certificate store methods2025-08-11vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
BIT-python-2024-0397Memory race condition in ssl.SSLContext certificate store methods2024-06-20vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
BIT-python-min-2024-0397Memory race condition in ssl.SSLContext certificate store methods2025-01-17vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0.
PSF-2024-42024-06-17vendor · osvUS
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

also known as (8)

Other names and identifiers for this entity.

CNNVD-202406-1925 cnnvd
EUVD-2024-16193 enisa_euvd
BDU:2024-05177 fstec_bdu
GHSA-xhf3-pp4q-gxh5 enisa_euvd
BIT-libpython-2024-0397osv
BIT-python-2024-0397osv
BIT-python-min-2024-0397osv
PSF-2024-4osv

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund ncsc_nl siemens_psirt suse_csaf NVD CVE.org MITRE

published 2024-06-17modified 2026-06-17

references (36)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan