p PatchFirst

CVE-2023-7152

CVE-2023-7152 · MicroPython modselect.c poll_set_add_fd use after free

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The patch is identified as 8b24aa36ba978eafc6114b6798b47b7bfecdca26. It is recommended to apply a patch to fix this issue. VDB-249158 is the identifier assigned to this vulnerability.

CVSS 5.5 · Medium · EPSS 0.9%

Published
Updated

Stack: system · python

Affected products and versions

  • micropython

    Versions
    • 1.21.0: Affected
    • 1.22.0-preview: Affected

    No fix published

  • micropython-copy PyPI

    Versions
    • 0.0.1
    • 0.0.2
    • 3.3.3-2
    • 3.3.3.post3
    Affected ranges
    • GIT: < 8b24aa36ba978eafc6114b6798b47b7bfecdca26
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • micropython-io PyPI

    Versions
    • 0.0.1
    • 0.0.2
    • 0.0.3
    • 0.1
    Affected ranges
    • GIT: < 8b24aa36ba978eafc6114b6798b47b7bfecdca26
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • micropython-os PyPI

    Versions
    • 0.2.3
    • 0.2.4
    • 0.3
    • 0.3.1
    • 0.4.1
    • 0.4.2
    • 0.4.3
    • 0.4.4
    • 0.6
    • 0.7
    • 0.7.1
    • 0.8
    Affected ranges
    • GIT: < 8b24aa36ba978eafc6114b6798b47b7bfecdca26
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • micropython-select PyPI

    Versions
    • 0.0.1
    • 0.0.3
    • 0.0.4
    • 0.0.5
    • 0.0.6
    • 0.0.7
    • 0.0.8
    • 0.1
    • 0.1.1
    • 0.1.2
    • 0.1.3
    • 0.1.4
    • 0.1.5
    • 0.1.6
    • 0.1.7
    • 0.2
    • 0.3
    Affected ranges
    • GIT: < 8b24aa36ba978eafc6114b6798b47b7bfecdca26
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:18.04:LTS

    Versions
    • 1.2.3.57+dfsg1-2build1
    • 1.2.3.57+dfsg1-2build2
    • 1.2.3.57+dfsg1-2build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:20.04:LTS

    Versions
    • 1.4.9.69+dfsg1-2build1
    • 1.5.0.85+dfsg1-2
    • 1.5.0.85+dfsg1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:22.04:LTS

    Versions
    • 1.6.0.41+dfsg1-1
    • 1.7.0.39+dfsg2-1build1
    • 1.7.0.39+dfsg2-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:24.04:LTS

    Versions
    • 1.9.0.35+dfsg2-1.1
    • 1.9.0.59+dfsg2-1
    • 1.9.0.69+dfsg2-1
    • 1.9.0.93+dfsg2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:25.10

    Versions
    • 1.9.0.93+dfsg2-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:26.10

    Versions
    • 1.9.0.93+dfsg2-3build2
    • 1.9.0.93+dfsg2-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • giac Ubuntu:26.04:LTS

    Versions
    • 1.9.0.93+dfsg2-3build1
    • 1.9.0.93+dfsg2-3build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →