PT-2017-14545 · Confire · Confire

Joel · Publicado 2017-11-10 · Atualizado 2019-10-03 · CVE-2017-16763

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Confire version 0.2.0

Description A vulnerability exists in the YAML parsing functionality due to the use of the yaml.load function to load user-specific configuration from ~/.confire.yaml. This allows a YAML parser to execute arbitrary Python commands, resulting in command execution. An attacker can exploit this by inserting Python code into loaded YAML.

Recommendations For Confire version 0.2.0, consider disabling the yaml.load function in config.py until a patch is available to prevent arbitrary command execution. Restrict access to the ~/.confire.yaml file to minimize the risk of exploitation. Avoid using the yaml.load function to load user-specific configuration files until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2017-16763

GHSA-M85C-9MF8-M2M6

PYSEC-2017-78

Produtos afetados

Confire

Referências · 10

• 🔥 https://github.com/bbengfort/confire/issues/24 · Exploit
• 🔥 https://joel-malwarebenchmark.github.io/blog/2017/11/12/cve-2017-16763-configure-loaded-through-confire · Exploit
• https://github.com/pypa/advisory-database/tree/main/vulns/confire/PYSEC-2017-78.yaml · Nota
• https://github.com/bbengfort/confire · Nota
• https://github.com/bbengfort/confire/commit/8cc86a5ec2327e070f1d576d61bbaadf861597ea · Correção
• https://github.com/advisories/GHSA-m85c-9mf8-m2m6 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16763 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2017-78 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-m85c-9mf8-m2m6 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-16763 · Aviso do Fabricante