THREATOPS
THREAT OPSThreat News › [NVD] CVE-2024-12254 (HIGH 7.5) — Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain

[NVD] CVE-2024-12254 (HIGH 7.5) — Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain

lownvdPublished 2024-12-06

CVE-2024-12254 CVSS: 7.5 HIGH Published: 2024-12-06T16:15:20.623

Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhau

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-12254