PT-2024-37999 · H2O · H2O

Ori Hollander

·

Published

2024-06-10

·

Updated

2024-12-13

·

CVE-2024-6960

CVSS v4.0

7.7

High

VectorAV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions H2O versions prior to 3.38.0
Description The H2O machine learning platform uses "Iced" classes to move Java objects around the cluster, which supports the inclusion of serialized Java objects. When a model is deserialized, any class is allowed to be deserialized without a whitelist, allowing an attacker to construct a crafted Iced model that uses Java gadgets and leads to arbitrary code execution when imported to the H2O platform.
Recommendations For versions prior to 3.38.0, upgrade to version 3.38.0 to prevent attackers from running arbitrary code on the system. As a temporary workaround, consider restricting the import of models to trusted sources until the upgrade is applied.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-02728
CVE-2024-6960
GHSA-W36W-948J-XHFW

Affected Products

H2O