Intel

AIKIDO-2025-10528

python-socks is vulnerable to Memory Leak

Memory Leak Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 4, 2025

30

Low Risk

This Affects:

PYTHONpython-socks
2.0.0 - 2.7.1
Fixed in 2.7.2
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to memory leaks caused by improper socket handling. When attempting to connect through a SOCKS proxy to a non-existent or non-responsive server, the package fails to properly close the socket, resulting in a leaked open connection. Over time, repeated failed connection attempts can exhaust system resources, potentially leading to degraded performance or application crashes.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

python-socks is vulnerable to Memory Leak in versions 2.0.0 - 2.7.1.

How to fix this

Upgrade the python-socks library to the patch version.