github - ghsa-8q59-q68h-6hv4

ghsa-8q59-q68h-6hv4

Vulnerability from github

Published

2021-03-25 21:26

Modified

2021-09-28 19:04

Severity

9.8 (Critical) - CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Improper Input Validation in PyYAML

Details

A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "affected_functions": [
          "yaml.constructor.FullConstructor",
          "yaml.constructor.UnsafeConstructor"
        ]
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "PyYAML"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2020-14343"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-03-25T21:15:23Z",
    "nvd_published_at": "2021-02-09T21:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.",
  "id": "GHSA-8q59-q68h-6hv4",
  "modified": "2021-09-28T19:04:49Z",
  "published": "2021-03-25T21:26:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14343"
    },
    {
      "type": "WEB",
      "url": "https://github.com/SeldonIO/seldon-core/issues/2252"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yaml/pyyaml/issues/420"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yaml/pyyaml/issues/420#issuecomment-663673966"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yaml/pyyaml/commit/a001f2782501ad2d24986959f0239a354675f9dc"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860466"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/yaml/pyyaml"
    },
    {
      "type": "WEB",
      "url": "https://pypi.org/project/PyYAML"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Improper Input Validation in PyYAML"
}

cve-2020-14343

Vulnerability from cvelistv5

Published

2021-02-09 00:00

Modified

2024-08-04 12:39

Severity

Summary

References

URL	Tags
https://github.com/yaml/pyyaml/issues/420
https://bugzilla.redhat.com/show_bug.cgi?id=1860466
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://github.com/SeldonIO/seldon-core/issues/2252

Impacted products

Vendor	Product
n/a	PyYAML

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:39:36.530Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/yaml/pyyaml/issues/420"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860466"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/SeldonIO/seldon-core/issues/2252"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PyYAML",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "PyYAML 5.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-06T00:00:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://github.com/yaml/pyyaml/issues/420"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860466"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "url": "https://github.com/SeldonIO/seldon-core/issues/2252"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2020-14343",
    "datePublished": "2021-02-09T00:00:00",
    "dateReserved": "2020-06-17T00:00:00",
    "dateUpdated": "2024-08-04T12:39:36.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

pysec-2021-142

Vulnerability from pysec

Published

2021-02-09 21:15

Modified

2021-08-27 03:22

Details

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "pyyaml",
        "purl": "pkg:pypi/pyyaml"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.01",
        "3.02",
        "3.03",
        "3.04",
        "3.05",
        "3.06",
        "3.07",
        "3.08",
        "3.09",
        "3.10",
        "3.11",
        "3.12",
        "3.13",
        "3.13b1",
        "3.13rc1",
        "4.2b1",
        "4.2b2",
        "4.2b4",
        "5.1",
        "5.1.1",
        "5.1.2",
        "5.1b1",
        "5.1b3",
        "5.1b5",
        "5.1b7",
        "5.2",
        "5.2b1",
        "5.3",
        "5.3.1",
        "5.3b1",
        "5.4b1",
        "5.4b2"
      ]
    }
  ],
  "aliases": [
    "CVE-2020-14343",
    "GHSA-8q59-q68h-6hv4"
  ],
  "details": "A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.",
  "id": "PYSEC-2021-142",
  "modified": "2021-08-27T03:22:18.913334Z",
  "published": "2021-02-09T21:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860466"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-8q59-q68h-6hv4"
    }
  ]
}

Action not permitted

ghsa-8q59-q68h-6hv4

Vulnerability from github

cve-2020-14343

Vulnerability from cvelistv5

pysec-2021-142

Vulnerability from pysec

Tags