CVE-2024-3219
mediumpriority · track · 0OT risk · elevatedEPSS 0.002 · 16 %ileDEEUFRUSEPSS · scored 2026-10-27
The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 1.2–5.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
- NetApp ActiveIQ Unified Manager Windowsall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:windows
- NetApp ActiveIQ Unified Manager vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:vsphere
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2025-0927NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2025-05-04csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um Informationen offenzulegen.
- CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
- PSF-2024-72024-07-29vendor · osvUS
The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not verified before passing the two sockets back to the user, which leaves the server socket vulnerable to a connection race from a malicious local peer. Platforms that support AF_UNIX such as Linux and macOS are not affected by this vulnerability. Versions prior to CPython 3.5 are not affected due to the vulnerable API not being included.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (55)
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2024/07/29/3cnnvd
- https://cxsecurity.com/cveshow/CVE-2024-3219/cnnvd
- https://github.com/python/cpython/commit/06fa244666ec6335a3b9bf2367e31b42b9a89b20cnnvd
- https://github.com/python/cpython/commit/0b65c8bf5367625673eafb92f85046a1b31259f2cnnvd
- https://github.com/python/cpython/commit/220e31adeaaa8436c9ff234cba1398bc49e2bb6ccnnvd
- https://github.com/python/cpython/commit/2621a8a40ba4b2c68ca564671b7daa5da80a4508cnnvd
- https://github.com/python/cpython/commit/31302f5fc24eecd693f0c8aaba7c2840b09b594dcnnvd
- https://github.com/python/cpython/commit/3f5d9d12c74787fbf3f5891835c85cc15526c86dcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan