Vulnerability · Published Oct 11, 2023 · Assigned by GitHub_M

CVE-2023-23930vantage6's Pickle serialization is insecure

Medium 5.5

In plain English

A medium-severity unsafe deserialization in vantage6 from vantage6. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)1.1%top 34.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Version 4.0.0 contains a patch. Users may specify JSON serialization as a workaround.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	vantage6	4.0.2	GHSA-5m22-cfq9-86x6
PyPI	vantage6	4.0.2	PYSEC-2023-196

Affected products (as reported)

Vendor	Product	Versions
vantage6	vantage6	< 4.0.0

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

References

https://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6 x_refsource_CONFIRM
https://github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0 x_refsource_MISC
https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400 x_refsource_MISC
https://medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9 x_refsource_MISC