-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| zodb3 | pip | < 3.10.0a2 | 3.10.0a2 |
The vulnerability stems from improper error handling in the TCP connection acceptance process. The commit diff shows the patched version adds try/except blocks and socket cleanup in handle_accept. Multiple sources (CVE description, Python bug 6706, ZODB bug 135108) confirm the root cause was unhandled edge cases in accept() implementation. The StorageServer's connection handling in ZEO/zrpc/server.py was directly modified in the fix, indicating this was the vulnerable entry point.