Remote Code execution in SnakeYAML
58Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 8.3epss 100%
da publicação à arma306 dias
Publicada no NVD1 de dez.
metasploit+306d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
O que os fabricantes declaram (VEX)
Declarações oficiais dos fabricantes em formato CSAF/VEX: se o produto deles está afetado, já corrigido ou descartado — e por quê. É afirmação do fabricante, não juízo do Vexday.
Red Hatdocumento VEX ↗
Afetado
19 produtos (28 componentes)
Red Hat OpenShift Container Platform 3.11 · Red Hat Enterprise Linux 7 · Red Hat JBoss Enterprise Application Platform 6 · Red Hat OpenShift Dev Spaces · Red Hat Satellite 6 · e outros 14
none_available: Affected
Corrigido
24 produtos (122 componentes)
Middleware Containers for OpenShift · Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server · Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server · Middleware RHEL 7 Containers for OpenShift · OpenShift Developer Tools and Services for OCP 4.11 for RHEL 8 · e outros 19
Não afetado
17 produtos (2.407 componentes) — porque o código vulnerável não está presente no produto
Red Hat Satellite 6.13 for RHEL 8 · Red Hat JBoss EAP 7.4 for RHEL 7 Server · Red Hat JBoss EAP 7.4 for RHEL 8 · Red Hat JBoss EAP 7.4 for RHEL 9 · Red Hat OpenShift Container Platform 4.10 · e outros 12
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
SnakeYAML · SnakeYAMLReferências
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.htmlhttps://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.htmlhttps://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2https://github.com/mbechler/marshalsechttps://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnchttps://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4chttps://security.netapp.com/advisory/ntap-20230818-0015/https://security.netapp.com/advisory/ntap-20240621-0006/https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=truehttp://www.openwall.com/lists/oss-security/2023/11/19/1