CVE-2018-1000030

CVE-2018-1000030 describes Heap-Buffer-Overflow and Heap-Use-After-Free vulnerabilities in Python 2.7.14 and potentially earlier versions, affecting canonical python and ubuntu_linux distributions. These race condition vulnerabilities occur when multiple threads handle large amounts of data, leading to memory corruption. The vulnerability has a CVSSv3.1 score of 3.6 (Low), indicating a local attack vector, high attack complexity, and low impact on confidentiality and availability. While the Python Security Response Team (PSRT) does not consider it a security vulnerability due to the requirement for attacker-controlled code execution, it could violate trust boundaries in environments like Function-as-a-Service. There is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage.