CVE-2010-3493
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha...
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
Exploit likelihood
What each source reports
NVD Score used
4.3
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
CVE-2010-3493- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
CVE-2010-3493- Updated
- 2026-11-02
EUVDEUVD-2010-3491 No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
EUVD-2010-3491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rjw-m4xp-g2m7 No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha...
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
GHSA-5rjw-m4xp-g2m7- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVPSF-2010-7 No score
smtpd accept bug and race condition
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
PSF-2010-7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pythonRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-libsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-docsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-2.el6 | 0:2.6.6-2.el6 |
python-libsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-docsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-2.el6 | 0:2.6.6-2.el6 |
python-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3493 is a medium vulnerability (CVSS 4.3) in Python, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.80%, the 86th percentile. No source names a fixed version.
References
svn.python.org/view/python/branches/py3k/Lib/smtpd.py?r1=84289&r2=84288&pathrev=84289
openwall.com/lists/oss-security/2010/09/11/2
bugzilla.redhat.com/show_bug.cgi?id=632200
secunia.com/advisories/43068
bugs.launchpad.net/zodb/+bug/135108
vupen.com/english/advisories/2011/0212
Show 65 moreShow less
secunia.com/advisories/51040
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12210
secunia.com/advisories/50858
mandriva.com/security/advisories?name=MDVSA-2010:216
bugs.python.org/issue9129
securityfocus.com/bid/44533
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
openwall.com/lists/oss-security/2010/09/24/3
ubuntu.com/usn/USN-1596-1
openwall.com/lists/oss-security/2010/09/22/3
bugs.python.org/issue6706
openwall.com/lists/oss-security/2010/09/09/6
ubuntu.com/usn/USN-1613-2
lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
svn.python.org/view?view=rev&revision=84289
secunia.com/advisories/51024
ubuntu.com/usn/USN-1613-1
mandriva.com/security/advisories?name=MDVSA-2010:215
nvd.nist.gov/vuln/detail/CVE-2010-3493
github.com/advisories/GHSA-5rjw-m4xp-g2m7
access.redhat.com/errata/RHSA-2011:0491
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHSA-2009-1625.html
bugzilla.redhat.com/show_bug.cgi?id=531697
bugzilla.redhat.com/show_bug.cgi?id=590690
bugzilla.redhat.com/show_bug.cgi?id=598197
bugzilla.redhat.com/show_bug.cgi?id=680094
bugzilla.redhat.com/show_bug.cgi?id=690560
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0491.json
access.redhat.com/security/cve/CVE-2009-3720
cve.org/CVERecord?id=CVE-2009-3720
nvd.nist.gov/vuln/detail/CVE-2009-3720
access.redhat.com/security/cve/CVE-2010-1634
cve.org/CVERecord?id=CVE-2010-1634
nvd.nist.gov/vuln/detail/CVE-2010-1634
access.redhat.com/security/cve/CVE-2010-2089
cve.org/CVERecord?id=CVE-2010-2089
nvd.nist.gov/vuln/detail/CVE-2010-2089
access.redhat.com/security/cve/CVE-2010-3493
cve.org/CVERecord?id=CVE-2010-3493
access.redhat.com/security/cve/CVE-2011-1015
cve.org/CVERecord?id=CVE-2011-1015
nvd.nist.gov/vuln/detail/CVE-2011-1015
access.redhat.com/security/cve/CVE-2011-1521
cve.org/CVERecord?id=CVE-2011-1521
nvd.nist.gov/vuln/detail/CVE-2011-1521
access.redhat.com/errata/RHSA-2011:0492
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0492.json
access.redhat.com/errata/RHSA-2011:0554
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/python.html
python.org/download/releases/2.6.6/NEWS.txt
bugzilla.redhat.com/show_bug.cgi?id=603073
bugzilla.redhat.com/show_bug.cgi?id=614680
bugzilla.redhat.com/show_bug.cgi?id=625393
bugzilla.redhat.com/show_bug.cgi?id=625395
bugzilla.redhat.com/show_bug.cgi?id=626756
bugzilla.redhat.com/show_bug.cgi?id=627301
bugzilla.redhat.com/show_bug.cgi?id=634944
bugzilla.redhat.com/show_bug.cgi?id=639392
bugzilla.redhat.com/show_bug.cgi?id=649274
bugzilla.redhat.com/show_bug.cgi?id=650588
bugzilla.redhat.com/show_bug.cgi?id=669847
bugzilla.redhat.com/show_bug.cgi?id=684991
bugzilla.redhat.com/show_bug.cgi?id=690315
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0554.json