CVE-2024-27758

2024-03-1216:15:08

Debian Security Bug Tracker

security-tracker.debian.org

rpyc

server

remote code execution

client netref

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution.

OSVersionArchitecturePackageVersionFilename
Debian12allrpyc<= 5.3.0-2rpyc_5.3.0-2_all.deb
Debian999allrpyc<= 6.0.0-1rpyc_6.0.0-1_all.deb
Debian13allrpyc<= 6.0.0-1rpyc_6.0.0-1_all.deb