CVE-2010-3493
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha...
CVE-2010-3493 is a medium vulnerability (CVSS 4.3) in Python, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.80%, the 86th percentile. Fixed in python 0:2.3.4-14.10.el4.
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
Exploit likelihood
What each source reports
NVD Score used
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
CVE-2010-3493- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
CVE-2010-3493- Updated
- 2026-11-02
EUVDEUVD-2010-3491 No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
EUVD-2010-3491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rjw-m4xp-g2m7 No score
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha...
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
GHSA-5rjw-m4xp-g2m7- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVPSF-2010-7 No score
smtpd accept bug and race condition
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
- Record
PSF-2010-7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.10.el4 | 0:2.3.4-14.10.el4 |
pythonRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::client |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-develRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-libsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
python-toolsRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
tkinterRed Hat:enterprise_linux:5::server |
before 0:2.4.3-44.el5 | 0:2.4.3-44.el5 |
pythonRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-libsRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::client |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-libsRed Hat:enterprise_linux:6::computenode |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-docsRed Hat:enterprise_linux:6::server |
before 0:2.6.6-2.el6 | 0:2.6.6-2.el6 |
python-libsRed Hat:enterprise_linux:6::server |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-testRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-toolsRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
python-docsRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-2.el6 | 0:2.6.6-2.el6 |
python-libsRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
tkinterRed Hat:enterprise_linux:6::workstation |
before 0:2.6.6-20.el6 | 0:2.6.6-20.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
svn.python.org/view/python/branches/py3k/Lib/smtpd.py?r1=84289&r2=84288&pathrev=84289
openwall.com/lists/oss-security/2010/09/11/2
bugzilla.redhat.com/show_bug.cgi?id=632200
secunia.com/advisories/43068
bugs.launchpad.net/zodb/+bug/135108
vupen.com/english/advisories/2011/0212
Show 65 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12210
mandriva.com/security/advisories?name=MDVSA-2010:216
bugs.python.org/issue9129
securityfocus.com/bid/44533
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
ubuntu.com/usn/USN-1596-1
nvd.nist.gov/vuln/detail/CVE-2010-3493
github.com/advisories/GHSA-5rjw-m4xp-g2m7
access.redhat.com/errata/RHSA-2011:0491
rhn.redhat.com/errata/RHSA-2009-1625.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0491.json
cve.org/CVERecord?id=CVE-2009-3720
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/python.html
python.org/download/releases/2.6.6/NEWS.txt