PT-2011-4940 · Celery · Celery

Ask Solem · Published 2011-12-05 · Updated 2022-05-17 · CVE-2011-4356

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Celery versions 2.1 through 2.2.7 Celery versions 2.3 through 2.3.3 Celery versions 2.4 through 2.4.3

Description The issue allows local users to gain privileges via vectors involving crafted code that is executed by the worker process. This is due to the software changing the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd detach, celeryd-multi, and celeryev.

Recommendations For Celery versions 2.1 through 2.2.7, update to version 2.2.8 or later. For Celery versions 2.3 through 2.3.3, update to version 2.3.4 or later. For Celery versions 2.4 through 2.4.3, update to version 2.4.4 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

CVE-2011-4356

GHSA-RPC6-H455-3RX5

PYSEC-2011-17

Affected Products

Celery

References · 19

• https://github.com/ask/celery/blob/master/docs/sec/CELERYSA-0001.txt · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-4356 · Security Note
• https://osv.dev/vulnerability/CVE-2011-4356 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2011-17 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4356 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4356 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rpc6-h455-3rx5 · Vendor Advisory
• https://github.com/celery/celery/blob/master/docs/sec/CELERYSA-0001.txt · Note
• https://github.com/celery/celery/commit/53514b158b743678d8993638be5920cd09ccc35c · Note
• https://github.com/celery/celery/pull/544 · Note
• https://github.com/celery/celery/commit/73388921731a0e6feb28ab0d389c4f7dc4d524f6 · Note
• https://github.com/celery/celery/commit/e0767e40994754fe8482bf4ff622c5c6d0b9f671 · Note
• https://github.com/celery/celery · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/celery/PYSEC-2011-17.yaml · Note
• https://github.com/ask/celery/pull/544 · Note