{"id":"PSF-2023-7","summary":"Reference count issue in _asyncio._swap_current_task()","details":"An issue in Python CPython 3.12.0b1 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task() component.","aliases":["BIT-libpython-2022-48566","BIT-python-2022-48566","BIT-python-2023-38898","BIT-python-min-2022-48566","CVE-2022-48566","CVE-2023-38898","GHSA-cgfh-jp5w-8cmx","PSF-2023-6"],"modified":"2025-10-09T00:59:21.561476Z","published":"2023-08-15T00:00:00Z","references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38898"},{"type":"WEB","url":"https://github.com/python/cpython/issues/105987"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"a474e04388c2ef6aca75c26cb70a1b6200235feb"},{"fixed":"d2cbb6e918d9ea39f0dd44acb53270f2dac07454"},{"fixed":"9e6f8d46150c1a0af09d68ce63c603cf321994aa"}]}],"versions":["v3.12.0b1","v3.12.0b2","v3.12.0b3"],"database_specific":{"vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["191021939378700911449457351486814660574","139084392064937382158600303254735121242","339129197347927920871179333623108798584","60697615326544651854087616057761703228","295205940416243995627994335495033384442","173852808721946194109864103721722493672","251231637834396675887583955690109914299","152580888405908106177175252119652780984","1035282566855804466272540142399876334","255504517052353744146441103320673914751","273165044685903141850571129904287926296","2445216005046600314349186278536596202","165122183762461554490955405121837841219","250298179367625309427062748223013252283","241915982706176438725145040101349235365"]},"id":"PSF-2023-7-040824a0","target":{"file":"Modules/_asynciomodule.c"},"signature_type":"Line","source":"https://github.com/python/cpython/commit/d2cbb6e918d9ea39f0dd44acb53270f2dac07454","deprecated":false},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["191021939378700911449457351486814660574","139084392064937382158600303254735121242","339129197347927920871179333623108798584","60697615326544651854087616057761703228","295205940416243995627994335495033384442","173852808721946194109864103721722493672","251231637834396675887583955690109914299","152580888405908106177175252119652780984","1035282566855804466272540142399876334","255504517052353744146441103320673914751","273165044685903141850571129904287926296","2445216005046600314349186278536596202","165122183762461554490955405121837841219","250298179367625309427062748223013252283","241915982706176438725145040101349235365"]},"id":"PSF-2023-7-9545f47c","target":{"file":"Modules/_asynciomodule.c"},"signature_type":"Line","source":"https://github.com/python/cpython/commit/9e6f8d46150c1a0af09d68ce63c603cf321994aa","deprecated":false},{"signature_version":"v1","digest":{"function_hash":"85792863499473597187050678090001620694","length":542},"id":"PSF-2023-7-b9d99530","target":{"file":"Modules/_asynciomodule.c","function":"swap_current_task"},"signature_type":"Function","source":"https://github.com/python/cpython/commit/9e6f8d46150c1a0af09d68ce63c603cf321994aa","deprecated":false},{"signature_version":"v1","digest":{"function_hash":"85792863499473597187050678090001620694","length":542},"id":"PSF-2023-7-cd9b5ec5","target":{"file":"Modules/_asynciomodule.c","function":"swap_current_task"},"signature_type":"Function","source":"https://github.com/python/cpython/commit/d2cbb6e918d9ea39f0dd44acb53270f2dac07454","deprecated":false}],"source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2023-7.json"}}],"schema_version":"1.7.3"}