Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38044
HistoryNov 16, 2022 - 8:35 p.m.

Privilege Escalation

2022-11-1620:35:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
python3.10
privilege escalation
vulnerability
forkserver start method
linux
pickles deserialization
local network namespace
arbitrary codes
security issue

EPSS

0

Percentile

10.1%

JSON

python3.10 is vulnerable to privilege escalation. The vulnerability exists when used with the forkserver start method on Linux allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine which allows an attacker to execute arbitrary codes.

References

Related

fedora 12
osv 10
nessus 40
openvas 23
oraclelinux 2
rocky 2
debiancve 1
ibm 2
cbl_mariner 2
alpinelinux 1
cvelist 1
cve 1
redhat 4
prion 1
almalinux 2
ubuntucve 1
ubuntu 3
redhatcve 1
nvd 1
photon 2
slackware 1
gentoo 1
ics 1
oracle 3
avleonov 1
fedora
fedora
[SECURITY] Fedora 37 Update: python3.9-3.9.15-2.fc37
2022-11-18 01:17:27
[SECURITY] Fedora 35 Update: python3.9-3.9.15-2.fc35
2022-11-18 01:06:51
[SECURITY] Fedora 37 Update: python3.11-3.11.0-1.fc37
2022-11-02 19:53:36
osv
osv
Important: python3.9 security update
2022-11-16 10:26:42
CVE-2022-42919
2022-11-07 00:15:09
Linux specific local privilege escalation via the multiprocessing forkserver start method
2022-11-06 00:00:00
nessus
nessus
CentOS 8 : python39:3.9 (CESA-2022:8492)
2022-11-16 00:00:00
Oracle Linux 9 : python3.9 (ELSA-2022-8493)
2022-11-24 00:00:00
Rocky Linux 8 : python39:3.9 (RLSA-2022:8492)
2022-11-23 00:00:00
openvas
openvas
Fedora: Security Advisory for python3.11 (FEDORA-2022-a9a4c48d06)
2022-11-03 00:00:00
Fedora: Security Advisory for python3-docs (FEDORA-2022-a9a4c48d06)
2022-11-03 00:00:00
Fedora: Security Advisory for python3.9 (FEDORA-2022-028c09eaa7)
2022-11-18 00:00:00
oraclelinux
oraclelinux
python39:3.9 security update
2022-11-22 00:00:00
python3.9 security update
2022-11-24 00:00:00
rocky
rocky
python39:3.9 security update
2022-11-16 10:10:13
python3.9 security update
2022-11-16 10:26:42
debiancve
debiancve
CVE-2022-42919
2022-11-07 00:15:09
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to elevated privileges due to [CVE-2022-42919]
2023-01-26 15:18:13
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
2023-01-30 21:27:00
cbl_mariner
cbl_mariner
CVE-2022-42919 affecting package python3 for versions less than 3.9.14-5
2022-12-19 20:12:40
CVE-2022-42919 affecting package python3 3.7.13-6
2023-06-13 20:02:41
alpinelinux
alpinelinux
CVE-2022-42919
2022-11-07 00:15:09
cvelist
cvelist
CVE-2022-42919
2022-11-06 00:00:00
cve
cve
CVE-2022-42919
2022-11-07 00:15:09
redhat
redhat
(RHSA-2022:8493) Important: python3.9 security update
2022-11-16 10:26:42
(RHSA-2022:8492) Important: python39:3.9 security update
2022-11-16 10:10:13
(RHSA-2023:1326) Important: OpenShift Container Platform 4.13.0 security update
2023-05-17 22:28:04
prion
prion
Default configuration
2022-11-07 00:15:00
almalinux
almalinux
Important: python3.9 security update
2022-11-16 00:00:00
Important: python39:3.9 security update
2022-11-16 00:00:00
ubuntucve
ubuntucve
CVE-2022-42919
2022-11-02 00:00:00
ubuntu
ubuntu
Python vulnerability
2022-11-03 00:00:00
Python vulnerabilities
2023-02-27 00:00:00
Python vulnerabilities
2024-07-11 00:00:00
redhatcve
redhatcve
CVE-2022-42919
2022-10-31 04:25:52
nvd
nvd
CVE-2022-42919
2022-11-07 00:15:09
photon
photon
Important Photon OS Security Update - PHSA-2022-0283
2022-11-16 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0283
2022-11-16 00:00:00
slackware
slackware
[slackware-security] python3
2022-12-07 18:52:09
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2023-05-03 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

EPSS

0

Percentile

10.1%

JSON
Related for VERACODE:38044
fedora12osv10nessus40openvas23oraclelinux2rocky2debiancve1ibm2cbl_mariner2alpinelinux1cvelist1cve1redhat4prion1almalinux2ubuntucve1ubuntu3redhatcve1nvd1photon2slackware1gentoo1ics1oracle3avleonov1