-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stemmed from two key issues: 1) The SSL socket was configured with blocking behavior (default do_handshake_on_connect=True), allowing a single connection to block the server. 2) The ProtectedHandler's handle method didn't implement non-blocking handshake handling. The fix added explicit non-blocking handshake management in handle() and disabled do_handshake_on_connect in the socket configuration. These components directly map to the vulnerability's root causes described in CVE-2023-38200 and the patch details.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| keylime | pip | < 7.4.0 | 7.4.0 |
Ongoing coverage of React2Shell