Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38044
HistoryNov 16, 2022 - 8:35 p.m.

Privilege Escalation

2022-11-1620:35:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.6%

JSON

python3.10 is vulnerable to privilege escalation. The vulnerability exists when used with the forkserver start method on Linux allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine which allows an attacker to execute arbitrary codes.

References

Related

nessus 38
fedora 12
osv 9
openvas 22
oraclelinux 2
rocky 2
debiancve 1
ibm 2
alpinelinux 1
cve 1
cbl_mariner 2
redhat 4
almalinux 2
redhatcve 1
ubuntu 2
ubuntucve 1
prion 1
photon 2
slackware 1
gentoo 1
ics 1
oracle 3
avleonov 1
nessus
nessus
CentOS 8 : python39:3.9 (CESA-2022:8492)
2022-11-16 00:00:00
CBL Mariner 2.0 Security Update: python3 (CVE-2022-42919)
2023-03-20 00:00:00
Oracle Linux 9 : python3.9 (ELSA-2022-8493)
2022-11-24 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: python3.9-3.9.15-2.fc37
2022-11-18 01:17:27
[SECURITY] Fedora 35 Update: python3.9-3.9.15-2.fc35
2022-11-18 01:06:51
[SECURITY] Fedora 37 Update: python3.11-3.11.0-1.fc37
2022-11-02 19:53:36
osv
osv
Linux specific local privilege escalation via the multiprocessing forkserver start method
2022-11-06 00:00:00
CVE-2022-42919
2022-11-07 00:15:09
Important: python3.9 security update
2022-11-16 10:26:42
openvas
openvas
Fedora: Security Advisory for python3.11 (FEDORA-2022-a9a4c48d06)
2022-11-03 00:00:00
Fedora: Security Advisory for python3-docs (FEDORA-2022-a9a4c48d06)
2022-11-03 00:00:00
Fedora: Security Advisory for python3.9 (FEDORA-2022-028c09eaa7)
2022-11-18 00:00:00
oraclelinux
oraclelinux
python39:3.9 security update
2022-11-22 00:00:00
python3.9 security update
2022-11-24 00:00:00
rocky
rocky
python39:3.9 security update
2022-11-16 10:10:13
python3.9 security update
2022-11-16 10:26:42
debiancve
debiancve
CVE-2022-42919
2022-11-07 00:15:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to elevated privileges due to [CVE-2022-42919]
2023-01-26 15:18:13
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
2023-01-30 21:27:00
alpinelinux
alpinelinux
CVE-2022-42919
2022-11-07 00:15:00
cve
cve
CVE-2022-42919
2022-11-07 00:15:00
cbl_mariner
cbl_mariner
CVE-2022-42919 affecting package python3 for versions less than 3.9.14-5
2022-12-19 20:12:40
CVE-2022-42919 affecting package python3 3.7.13-6
2023-06-13 20:02:41
redhat
redhat
(RHSA-2022:8492) Important: python39:3.9 security update
2022-11-16 10:10:13
(RHSA-2022:8493) Important: python3.9 security update
2022-11-16 10:26:42
(RHSA-2023:1326) Important: OpenShift Container Platform 4.13.0 security update
2023-05-17 22:28:04
almalinux
almalinux
Important: python39:3.9 security update
2022-11-16 00:00:00
Important: python3.9 security update
2022-11-16 00:00:00
redhatcve
redhatcve
CVE-2022-42919
2022-10-31 04:25:52
ubuntu
ubuntu
Python vulnerability
2022-11-03 00:00:00
Python vulnerabilities
2023-02-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-42919
2022-11-02 00:00:00
prion
prion
Default configuration
2022-11-07 00:15:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0283
2022-11-16 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0283
2022-11-16 00:00:00
slackware
slackware
[slackware-security] python3
2022-12-07 18:52:09
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2023-05-03 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.6%

JSON
Related for VERACODE:38044
nessus38fedora12osv9openvas22oraclelinux2rocky2debiancve1ibm2alpinelinux1cve1cbl_mariner2redhat4almalinux2redhatcve1ubuntu2ubuntucve1prion1photon2slackware1gentoo1ics1oracle3avleonov1