Servers and applications
CVE-2010-3492
The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.
- Severity
- Medium 5.0
- Published
- 19 Oct 2010
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.1.2
- Exploit chance
- 3.4% in the next 30 daysHigher than 88% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · No login needed
- Attacker can
- Slow it down
- CVSS vector
AV:N/AC:L/Au:N/C:N/I:N/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PythonServers and applications · cpe:a:python:python |
|