THREAT OPS › Threat News › [NVD] CVE-2024-12254 (HIGH 7.5) — Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()
method would not "pause" writing and signal to the Protocol to drain
the buffer to the wire once the write buffer reached the "high-water
mark". Because of this, Protocols would not periodically drain
[NVD] CVE-2024-12254 (HIGH 7.5) — Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain
CVE-2024-12254 CVSS: 7.5 HIGH Published: 2024-12-06T16:15:20.623
Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhau
Indicators of compromise
- CVE-2024-12254cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-12254