THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-6507 (MEDIUM 6.1) — An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not

[NVD] CVE-2023-6507 (MEDIUM 6.1) — An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not

lownvdPublished 2023-12-08

CVE-2023-6507 CVSS: 6.1 MEDIUM Published: 2023-12-08T19:15:08.440

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases.

When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, th

Indicators of compromise

CVE-2023-6507cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-6507