PSF-2023-7

See a problem?
Import Source
https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2023-7.json
JSON Data
https://api.test.osv.dev/v1/vulns/PSF-2023-7
Aliases
Published
2023-08-15T00:00:00Z
Modified
2025-09-19T01:45:08.213Z
Summary
Reference count issue in _asyncio._swap_current_task()
Details

An issue in Python CPython 3.12.0b1 allows an attacker to obtain sensitive information via the asyncio.swapcurrenttask() component.

References

Affected packages

Git / github.com/python/cpython

Affected ranges

Affected versions

v3.*

v3.12.0b1
v3.12.0b2
v3.12.0b3

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "191021939378700911449457351486814660574",
                    "139084392064937382158600303254735121242",
                    "339129197347927920871179333623108798584",
                    "60697615326544651854087616057761703228",
                    "295205940416243995627994335495033384442",
                    "173852808721946194109864103721722493672",
                    "251231637834396675887583955690109914299",
                    "152580888405908106177175252119652780984",
                    "1035282566855804466272540142399876334",
                    "255504517052353744146441103320673914751",
                    "273165044685903141850571129904287926296",
                    "2445216005046600314349186278536596202",
                    "165122183762461554490955405121837841219",
                    "250298179367625309427062748223013252283",
                    "241915982706176438725145040101349235365"
                ]
            },
            "source": "https://github.com/python/cpython/commit/d2cbb6e918d9ea39f0dd44acb53270f2dac07454",
            "deprecated": false,
            "target": {
                "file": "Modules/_asynciomodule.c"
            },
            "signature_type": "Line",
            "id": "PSF-2023-7-040824a0"
        },
        {
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "191021939378700911449457351486814660574",
                    "139084392064937382158600303254735121242",
                    "339129197347927920871179333623108798584",
                    "60697615326544651854087616057761703228",
                    "295205940416243995627994335495033384442",
                    "173852808721946194109864103721722493672",
                    "251231637834396675887583955690109914299",
                    "152580888405908106177175252119652780984",
                    "1035282566855804466272540142399876334",
                    "255504517052353744146441103320673914751",
                    "273165044685903141850571129904287926296",
                    "2445216005046600314349186278536596202",
                    "165122183762461554490955405121837841219",
                    "250298179367625309427062748223013252283",
                    "241915982706176438725145040101349235365"
                ]
            },
            "source": "https://github.com/python/cpython/commit/9e6f8d46150c1a0af09d68ce63c603cf321994aa",
            "deprecated": false,
            "target": {
                "file": "Modules/_asynciomodule.c"
            },
            "signature_type": "Line",
            "id": "PSF-2023-7-9545f47c"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 542.0,
                "function_hash": "85792863499473597187050678090001620694"
            },
            "source": "https://github.com/python/cpython/commit/9e6f8d46150c1a0af09d68ce63c603cf321994aa",
            "deprecated": false,
            "target": {
                "file": "Modules/_asynciomodule.c",
                "function": "swap_current_task"
            },
            "signature_type": "Function",
            "id": "PSF-2023-7-b9d99530"
        },
        {
            "signature_version": "v1",
            "digest": {
                "length": 542.0,
                "function_hash": "85792863499473597187050678090001620694"
            },
            "source": "https://github.com/python/cpython/commit/d2cbb6e918d9ea39f0dd44acb53270f2dac07454",
            "deprecated": false,
            "target": {
                "file": "Modules/_asynciomodule.c",
                "function": "swap_current_task"
            },
            "signature_type": "Function",
            "id": "PSF-2023-7-cd9b5ec5"
        }
    ]
}