CVE-2023-6507

16

FAUCET Score

CVE-2023-6507 is a medium-severity vulnerability affecting CPython 3.12.0 on POSIX systems, specifically within the subprocess module. When the extra_groups parameter is set to an empty list, the subprocess fails to drop the original process's groups, potentially allowing privilege escalation if run as root. The vulnerability has a CVSS score of 4.9, indicating a network attack vector with high privileges required and a high impact on integrity. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 3.12.0, < 3.12.1CPE match	cpe:2.3:a:python:python::::::::
		3.12.0CPE matchmatch criteria	cpe:2.3:a:python:python:3.12.0:-::::::
		3.13.0CPE matchmatch criteria	cpe:2.3:a:python:python:3.13.0:alpha1::::::
		3.13.0CPE matchmatch criteria	cpe:2.3:a:python:python:3.13.0:alpha2::::::

CVSS Data

CVSS version used by this source: 3.1

6.1MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

0.9

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.33%

Probability of exploitation in next 30 days

EPSS Percentile

68.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0133 is in the 75th percentile among its peer group of 3,565 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (9)

github_advisorypatch availablevia nvd_reference

microsoftpatch availablevia msrc

Product: azl3 python3 3.12.0-4 on Azure Linux 3.0Fixed in: 3.12.3-1

microsoftpatch availablevia msrc

Product: azl3 python3 3.12.3-1 on Azure Linux 3.0Fixed in: 3.12.3-1

microsoftpatch availablevia msrc

Product: Azure Linux 3.0 x64Fixed in: 3.12.3-1

microsoftpatch availablevia msrc

Product: Azure Linux 3.0 ARMFixed in: 3.12.3-1

microsoftpatch availablevia msrc

Product: 19964-17084Fixed in: 3.12.3-1

microsoftpatch availablevia msrc

Product: 17712-17084Fixed in: 3.12.3-1

nodejspatch availablevia llm_extracted

pjsippatch availablevia llm_extracted

Vendor Advisories (5)

nodejsllm-nodejs-302528ae26f0d946CRITICAL

HP ThinPro 8.1 SP4 Security Updates

pjsipllm-pjsip-7ba3ec379210ac70CRITICAL

HP ThinPro 8.1 SP4 Security Updates

microsoft2024-Sep/CVE-2023-6507

CVE-2023-6507

microsoft2023-Dec/CVE-2023-6507Moderate

Groups not dropped before running subprocess when using empty 'extra_groups' parameter

redhatCVE-2023-6507Moderate

python: Improper privileges drop on subprocess module

References

github.com / python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82b

github.com / python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06

github.com / python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610

github.com / python/cpython/issues/112334

Issue TrackingPatch

mail.python.org / archives/list/[email protected]/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD

Third Party Advisory