PT-2022-17890 · Systemd · Systemd

Arnab Phani · Published 2022-06-27 · Updated 2022-10-29 · CVE-2022-26477

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SystemDS versions prior to 2.2.1

Description The termination condition of the for loop in the readExternal method is a controllable variable, which, if tampered with, may lead to CPU exhaustion. SystemDS is a distributed system and needs to serialize/deserialize data, but in many code paths, the byte stream is protected by additional CRC fingerprints. The number of decoders is upper-bounded by twice the number of columns, which means an attacker would need to modify two entries in the byte stream in a consistent manner.

Recommendations For versions prior to 2.2.1, update to a version higher than 2.2.1 to apply the fix that adds an upper bound and termination condition in the read and write logic, improving robustness with almost zero overhead.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-26477

GHSA-M43H-HFRQ-X8WX

PYSEC-2022-222

Affected Products

Systemd

References · 10

• https://lists.apache.org/thread/r4x2d2r6d4zykdrrx6s2l4qbxgzws0z3 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-222 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26477 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m43h-hfrq-x8wx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26477 · Security Note
• https://github.com/apache/systemds · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/systemds/PYSEC-2022-222.yaml · Note
• https://github.com/advisories/GHSA-m43h-hfrq-x8wx · Note
• https://t.me/cibsecurity/45211 · Telegram Post
• https://security.netapp.com/advisory/ntap-20220812-0003 · Note