HIGH 7.8 Microsoft

CVE-2023-6597

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1 3.11.7 3.10.13 3.9.18 and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Microsoft Security Update 2024-Mar: An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1 3.11.7 3.10.13 3.9.18 and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Affected Products

References

Published: 2024-03-12 · Source: Microsoft · Feed updated: 2026-10-03
This high severity vulnerability with a CVSS score of 7.8 was published on 2024-03-12 via Microsoft. Affected: azl3 python3 3.12.0-4 on Azure Linux 3.0, cbl2 python3 3.9.14-8 on CBL Mariner 2.0, cbl2 python3 3.9.19-1 on CBL Mariner 2.0 and 1 more.
vulnfeed aggregates 10770 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.