PT-2022-5291 · Python +9 · Python +9

🗓️ 10 Mar 2020 00:00:00Reported by Positive TechnologiesType

Python multiprocessing forkserver on Linux allows local privilege escalation via pickle deserialization; disable abstract sockets as a workaround.

Reporter	Title	Published	Views	Family All 12922
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1	20 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package php8.0 version 8.0.25-alt1	2 Nov 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package python3 version 3.6.8-alt1	29 Jan 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package clamav version 0.101.4-alt1	2 Sep 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 68.2.2-alt1	9 Nov 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.19-alt1	12 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package clamav version 0.101.4-alt1	3 Sep 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 68.2.0-alt1	27 Oct 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1	10 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package expat version 2.2.9-alt1	31 May 202000:00	–	altlinux

Source	Link
github	www.github.com/Einstein2150/CVE-2022-48565-POC
bdu	www.bdu.fstec.ru/vul/2021-03715
errata	www.errata.altlinux.org/ALT-PU-2023-1518
bdu	www.bdu.fstec.ru/vul/2019-02825
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/681472
ubuntu	www.ubuntu.com/security/CVE-2019-9740

11 Aug 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.8 - 9.8

CVSS 28

CVSS 37.5 - 9.8

CVSS 48.7

EPSS0.75116

SSVC