Vulnerability · Published Nov 6, 2022 · Assigned by mitre
CVE-2022-42919
High 7.8
In plain English
A high-severity unsafe deserialization in the python-unversioned-command package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.8%top 43.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | python-unversioned-command | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3 | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-debug | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-devel | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-idle | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-libs | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-test | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:9 | python3-tkinter | 3.9.14-1.el9_1.1 | ALSA-2022:8493 |
| AlmaLinux:8 | python39 | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-2.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-devel | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-idle | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-idna | 2.10-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-libs | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-mod_wsgi | 4.7.1-5.module_el8.7.0+3344+df07b58a | ALSA-2022:8492 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-numpy-doc | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pip | 20.2.4-7.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pip-wheel | 20.2.4-7.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-psycopg2 | 2.8.6-2.module_el8.7.0+3344+df07b58a | ALSA-2022:8492 |
| AlmaLinux:8 | python39-psycopg2-doc | 2.8.6-2.module_el8.7.0+3344+df07b58a | ALSA-2022:8492 |
| AlmaLinux:8 | python39-psycopg2-tests | 2.8.6-2.module_el8.7.0+3344+df07b58a | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-requests | 2.25.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-rpm-macros | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-scipy | 1.5.4-3.module_el8.6.0+3248+c431e88c | ALSA-2022:8492 |
| AlmaLinux:8 | python39-scipy | 1.5.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-setuptools | 50.3.2-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-setuptools-wheel | 50.3.2-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-test | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-tkinter | 3.9.13-2.module_el8.7.0+3351+e02cdf9b | ALSA-2022:8492 |
| AlmaLinux:8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-urllib3 | 1.25.10-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| AlmaLinux:8 | python39-wheel-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2022:8492 |
| Debian:12 | pypy3 | 7.3.11+dfsg-1 | DEBIAN-CVE-2022-42919 |
| Debian:13 | pypy3 | 7.3.11+dfsg-1 | DEBIAN-CVE-2022-42919 |
| Debian:14 | pypy3 | 7.3.11+dfsg-1 | DEBIAN-CVE-2022-42919 |
| Debian:12 | python3.11 | 3.11.0-2 | DEBIAN-CVE-2022-42919 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.5.0+672+ab6eb015 | RLSA-2022:8492 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-4.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-5.module+el8.7.0+1064+ad564229 | RLSA-2022:8492 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | numpy | 0:1.19.4-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.4.0+597+ddf0ddea | RLSA-2022:8492 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.4.0+570+c2eaf144 | RLSA-2022:8492 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-2.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | python-idna | 0:2.10-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-lxml | 0:4.6.5-1.module+el8.6.0+795+de4edbcc | RLSA-2022:8492 |
| Rocky Linux:8 | python-lxml | 0:4.6.2-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.4.0+570+c2eaf144 | RLSA-2022:8492 |
| Rocky Linux:8 | python-psutil | 0:5.8.0-4.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | python-psutil | 0:5.8.0-4.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-2.module+el8.6.0+795+de4edbcc | RLSA-2022:8492 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-2.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.4.0+570+c2eaf144 | RLSA-2022:8492 |
| Rocky Linux:8 | python-requests | 0:2.25.0-2.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-toml | 0:0.10.1-5.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-4.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:9 | python3.9 | 0:3.9.14-1.el9_1.1 | RLSA-2022:8493 |
| Rocky Linux:8 | python39 | 0:3.9.13-2.module+el8.7.0+1092+55aa9635 | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-7.module+el8.6.0+795+de4edbcc | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-7.module+el8.7.0+1064+ad564229 | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-setuptools | 0:50.3.2-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-setuptools | 0:50.3.2-4.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Rocky Linux:8 | python3x-six | 0:1.15.0-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | scipy | 0:1.5.4-3.module+el8.4.0+574+843c4898 | RLSA-2022:8492 |
| Rocky Linux:8 | scipy | 0:1.5.4-3.module+el8.5.0+673+10283621 | RLSA-2022:8492 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.12-1~22.04.4 | USN-6891-1 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.6-1~22.04.1 | USN-5713-1 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.6-1~22.04.1 | UBUNTU-CVE-2022-42919 |
Affected products (as reported)
Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/python/cpython/issues/97514
- FEDORA-2022-1166a1df1e vendor-advisory
- FEDORA-2022-028c09eaa7 vendor-advisory
- FEDORA-2022-b17bf30e88 vendor-advisory
- FEDORA-2022-462f39dd2f vendor-advisory
- FEDORA-2022-a7cad6bd22 vendor-advisory
- FEDORA-2022-f44dd1bec2 vendor-advisory
- https://security.netapp.com/advisory/ntap-20221209-0006/
- https://github.com/python/cpython/issues/97514#issuecomment-1310277840
- FEDORA-2023-af5206f71d vendor-advisory
- FEDORA-2023-097dd40685 vendor-advisory
- https://github.com/python/cpython/compare/v3.10.8...v3.10.9
- https://github.com/python/cpython/compare/v3.9.15...v3.9.16
- GLSA-202305-02 vendor-advisory
- https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html