PT-2024-2537 · Rpyc+1 · Rpyc+1

Renbou · Published 2024-03-06 · Updated 2024-08-01 · CVE-2024-27758

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RPyC versions prior to 6.0.0

Description The issue is related to the netref component of the RPyC Python library, which has an incorrect security check for standard elements. This can allow a remote attacker to execute arbitrary code by crafting a class that exploits the vulnerability when a server exposes a method calling the array attribute for a client-provided netref, such as np.array(client netref).

Recommendations For versions prior to 6.0.0, update to version 6.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to methods that call the array attribute for client-provided netrefs until a patch is applied. Avoid using the np.array(client netref) function in affected API endpoints until the issue is resolved.

Fix

RCE

Missing Authentication

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-306

CWE-913

CWE-358

Related Identifiers

BDU:2024-02523

CVE-2024-27758

GHSA-H5CG-53G7-GQJW

OPENSUSE-SU-2024:0082-1

OPENSUSE-SU-2024:13768-1

PYSEC-2024-44

Affected Products

Debian

Rpyc

References · 25

• https://bdu.fstec.ru/vul/2024-02523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27758 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-27758 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-27758 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h5cg-53g7-gqjw · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-27758 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0082-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27758 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-44 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27758 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-27758 · Security Note
• https://github.com/tomerfiliba-org/rpyc/security/advisories/GHSA-h5cg-53g7-gqjw · Note
• https://github.com/tomerfiliba-org/rpyc/issues/551 · Note
• https://github.com/tomerfiliba-org/rpyc · Note
• https://github.com/tomerfiliba-org/rpyc/blob/5.3.1/rpyc/core/netref.py#L252-L255 · Note