Vulnerability · Published Aug 20, 2020 · Assigned by Alias

CVE-2020-10289RVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132

High 8.0

In plain English

A high-severity improper input validation in ros from Open Robotics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.0)8.0High

Exploit odds (30 days)2.0%top 19.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	ros-actionlib	1.13.1-4	DEBIAN-CVE-2020-10289
Debian:13	ros-actionlib	1.13.1-4	DEBIAN-CVE-2020-10289
Debian:14	ros-actionlib	1.13.1-4	DEBIAN-CVE-2020-10289

Affected products (as reported)

Vendor	Product	Versions
Open Robotics	ros	ROS Melodic Morenia and prior distros

Weakness: CWE-20 · Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

https://github.com/ros/actionlib/pull/171 x_refsource_CONFIRM