Test ID:	1.3.6.1.4.1.25623.1.0.124416
Category:	General
Title:	Python < 3.8.18, 3.9.x < 3.9.18, 3.10.x < 3.10.13, 3.11.x < 3.11.5 Security Bypass Vulnerability - Linux
Summary:	Python is prone to a security bypass vulnerability.
Description:	Summary: Python is prone to a security bypass vulnerability. Vulnerability Insight: Instances of ssl.SSLSocket are vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data if the socket is closed before initiating its own handshake. Affected Software/OS: Python version prior to 3.8.18, 3.9.x prior to 3.9.18, 3.10.x prior to 3.10.13 and 3.11.x prior to 3.11.5. Solution: Update to version 3.8.18, 3.9.18, 3.10.13, 3.11.5 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-40217 https://www.python.org/dev/security/ https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.