Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Arbitrary Code Execution

🗓️ 27 Sep 2022 07:29:55Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

joblib vulnerability in `_batched_calls_reducer_callback` function of `parallel.py` allows arbitrary code execution via the pre_dispatched flag in Parallel() clas

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ibm		Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that enable the assisted mapping capability may be vulnerable to arbitrary code injection due to CVE-2022-21797
4 Nov 202216:45
–ibm
ibm		Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
26 Mar 202503:30
–ibm
ibm		Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data
12 Dec 202317:35
–ibm
freebsd		py39-joblib -- arbitrary code execution
26 Sep 202200:00
–freebsd
attackerkb		CVE-2022-21797
26 Sep 202205:00
–attackerkb
alpinelinux		CVE-2022-21797
26 Sep 202205:05
–alpinelinux
astralinux		Astra Linux – Vulnerability in joblib
20 May 202605:53
–astralinux
cnnvd		joblib 安全漏洞
26 Sep 202200:00
–cnnvd
cve		CVE-2022-21797
26 Sep 202205:05
–cve
cvelist		CVE-2022-21797 Arbitrary Code Execution
26 Sep 202205:05
–cvelist
Rows per page
Vulners
Node
OR
AND
py3-joblibpy3-joblibMatch1.0.1-r1python
py3-joblibpy3-joblibMatch1.0.1-r0python
py3-joblibpy3-joblibMatch1.0.1-r2python
py3-joblibpy3-joblibMatch1.0.1-r3python
py3-joblibpy3-joblibMatch0.14.1-r0python
py3-joblibpy3-joblibMatch0.15.1-r0python
alpinelinuxalpine_linuxMatchedge
OR
joblib_projectjoblibRange0.14.0–0.14.1python
joblib_projectjoblibMatch0.13.2python
joblib_projectjoblibRange0.5.0.dev–0.13.1python
joblib_projectjoblibRange0.15.0–1.1.0python
SourceLink
githubwww.github.com/joblib/joblib/pull/1321
githubwww.github.com/joblib/joblib/issues/1128
githubwww.github.com/joblib/joblib/commit/b90f10efeb670a2cc877fb88ebb3f2019189e059
listswww.lists.debian.org/debian-lts-announce/2022/11/msg00020.html
listswww.lists.debian.org/debian-lts-announce/2023/03/msg00027.html
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BVOMMW37OXZWU2EV5ONAAS462IQEHZOF/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/BVOMMW37OXZWU2EV5ONAAS462IQEHZOF/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/MJ5XTJS6OKJRRVXWFN5J67K3BYPEOBDF/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5XTJS6OKJRRVXWFN5J67K3BYPEOBDF/
githubwww.github.com/advisories/GHSA-6hrg-qmvc-2xh8
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Aug 2024 16:53Current
9.2High risk
Vulners AI Score9.2
CVSS 3.17.3 - 9.8
EPSS0.01975
SSVC
joblibvulnerabilityarbitrary code executionparallel.py
23