CVE-2022-42919: fedoraproject fedora Deserialization of Untrusted Data

CVSS: 7.8v3.1HighModified

AliasesALPINE-CVE-2022-42919RHSA-2022:8492RHSA-2022:8493+6 more

Published 06-11-2022Last modified 03-11-2025

Vulnerability summary

CVE-2022-42919 is a high (CVSS 7.8) Deserialization of Untrusted Data vulnerability in fedoraproject fedora. EPSS estimates a 0.76% chance of exploitation in the next 30 days, higher than 54.5% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.76%

0%100%

Low · +0.02 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 10

DLA-3980-1 OPENSUSE-SU-2024:12910-1 OPENSUSE-SU-2024:14109-1 OPENSUSE-SU-2024:14434-1 OPENSUSE-SU-2025:15713-1 SUSE-SU-2022:4004-1+5 more

Timeline

06-11-2022
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.

CVSS metrics

6 scores · 6 sources · 1 version

v3.17.8

EPSS trend

Probability

0.76%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

+0.02 pp

From 0.75% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-502Deserialization of Untrusted DataThe product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected systems

Redhat84 products

mod_wsgi< 0:4.7.1-4.module+el8.4.0+9822+20bf1249 | < 0:4.7.1-5.module+el8.7.0+16654+645aad7f
numpy< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
numpy-debugsource< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python-cffi< 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-cffi-debugsource< 0:1.14.3-2.module+el8.4.0+9822+20bf1249

python-chardet< 0:3.0.4-19.module+el8.4.0+9822+20bf1249
python-cryptography< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-cryptography-debugsource< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-idna< 0:2.10-3.module+el8.4.0+9822+20bf1249
python-lxml< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python-lxml-debugsource< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python-ply< 0:3.11-10.module+el8.4.0+9822+20bf1249
python-psutil< 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psutil-debugsource< 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psycopg2< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python-psycopg2-debugsource< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python-pycparser< 0:2.20-3.module+el8.4.0+9822+20bf1249
python-PyMySQL< 0:0.10.1-2.module+el8.4.0+9822+20bf1249
python-pysocks< 0:1.7.1-4.module+el8.4.0+9822+20bf1249
python-requests< 0:2.25.0-2.module+el8.4.0+9822+20bf1249
python-toml< 0:0.10.1-5.module+el8.4.0+9822+20bf1249
python-unversioned-command< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python-urllib3< 0:1.25.10-3.module+el8.4.0+9822+20bf1249 | < 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
python-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python3< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-debug< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-devel< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-idle< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-libs< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-test< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python3-tkinter< 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python39< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34 | < 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python39-cffi< 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python39-cffi-debuginfo< 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python39-chardet< 0:3.0.4-19.module+el8.4.0+9822+20bf1249
python39-cryptography< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python39-cryptography-debuginfo< 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python39-debuginfo< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34 | < 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python39-debugsource< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34 | < 0:3.9.10-4.el9_0 | < 0:3.9.14-1.el9_1.1
python39-devel< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-idle< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-idna< 0:2.10-3.module+el8.4.0+9822+20bf1249
python39-libs< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-lxml< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python39-lxml-debuginfo< 0:4.6.2-2.module+el8.4.0+9822+20bf1249 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
python39-mod_wsgi< 0:4.7.1-4.module+el8.4.0+9822+20bf1249 | < 0:4.7.1-5.module+el8.7.0+16654+645aad7f
python39-numpy< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-debuginfo< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-doc< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-numpy-f2py< 0:1.19.4-2.module+el8.4.0+15042+dc5a279b.1 | < 0:1.19.4-3.module+el8.5.0+12204+54860423
python39-pip< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python39-pip-wheel< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python39-ply< 0:3.11-10.module+el8.4.0+9822+20bf1249
python39-psutil< 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python39-psutil-debuginfo< 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python39-psycopg2< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-debuginfo< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-doc< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-psycopg2-tests< 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-pycparser< 0:2.20-3.module+el8.4.0+9822+20bf1249
python39-PyMySQL< 0:0.10.1-2.module+el8.4.0+9822+20bf1249
python39-pysocks< 0:1.7.1-4.module+el8.4.0+9822+20bf1249
python39-pyyaml< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
python39-pyyaml-debuginfo< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
python39-requests< 0:2.25.0-2.module+el8.4.0+9822+20bf1249
python39-rpm-macros< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-scipy< 0:1.5.4-3.module+el8.4.0+9822+20bf1249
python39-scipy-debuginfo< 0:1.5.4-3.module+el8.4.0+9822+20bf1249
python39-setuptools< 0:50.3.2-3.module+el8.4.0+15042+dc5a279b.1 | < 0:50.3.2-4.module+el8.5.0+12204+54860423
python39-setuptools-wheel< 0:50.3.2-3.module+el8.4.0+15042+dc5a279b.1 | < 0:50.3.2-4.module+el8.5.0+12204+54860423
python39-six< 0:1.15.0-3.module+el8.4.0+9822+20bf1249
python39-test< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-tkinter< 0:3.9.2-2.module+el8.4.0+17197+13952279 | < 0:3.9.7-2.module+el8.6.0+17199+26869780 | < 0:3.9.13-2.module+el8.7.0+17195+44752b34
python39-toml< 0:0.10.1-5.module+el8.4.0+9822+20bf1249
python39-urllib3< 0:1.25.10-3.module+el8.4.0+9822+20bf1249 | < 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
python39-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python39-wheel-wheel< 1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1 | < 1:0.35.1-4.module+el8.5.0+12204+54860423
python3x-pip< 0:20.2.4-3.module+el8.4.0+15042+dc5a279b.1 | < 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
python3x-setuptools< 0:50.3.2-3.module+el8.4.0+15042+dc5a279b.1 | < 0:50.3.2-4.module+el8.5.0+12204+54860423
python3x-six< 0:1.15.0-3.module+el8.4.0+9822+20bf1249
PyYAML< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
PyYAML-debugsource< 0:5.4.1-1.module+el8.4.0+10484+27ce8e03 | < 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
scipy< 0:1.5.4-3.module+el8.4.0+9822+20bf1249
scipy-debugsource< 0:1.5.4-3.module+el8.4.0+9822+20bf1249

Show all 84

Opensuse3 products

python310&distro=openSUSE Tumbleweed< 3.10.8-2.1
python311&distro=openSUSE Tumbleweed< 3.11.0-1.1
python39&distro=openSUSE Tumbleweed< 3.9.15-2.1

Ubuntu3 products

python3.10< 3.10.6-1~22.04.1
python3.11< 3.11.0~rc1-1~22.04.1~esm1
python3.9< 3.9.5-3ubuntu0~20.04.1+esm1

Debian2 products

pypy3< 7.3.11+dfsg-1
python3.11< 3.11.0-2

Alpine1 product

python3< 3.10.9-r0

Fedoraproject1 product

fedoraEOL35 | 36 | 37

Python1 product

python≥ 3.7.3, ≤ 3.7.15 | ≥ 3.8.3, ≤ 3.8.15 | ≥ 3.9.0, < 3.9.16 | ≥ 3.10.0, < 3.10.9

7 vendors · 95 products

References

32 links

github.com/python/cpython/issues/97514ARTICLEThird Party Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
security.netapp.com/advisory/ntap-20221209-0006/Third Party Advisory
github.com/python/cpython/issues/97514Third Party Advisory
lists.fedoraproject.org/archives/…Vendor Advisory

Show all 32 references

lists.fedoraproject.org/archives/…Vendor Advisory
github.com/python/cpython/compare/v3.10.8...v3.10.9Release Notes
github.com/python/cpython/compare/v3.9.15...v3.9.16Release Notes
security.gentoo.org/glsa/202305-02Vendor Advisory
lists.debian.org/debian-lts-announce/2024/12/msg00000.html
security.alpinelinux.org/vuln/CVE-2022-42919Advisory
access.redhat.com/errata/RHSA-2022:8492Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2138705REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8492.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-42919REPORT
www.cve.org/CVERecord?id=CVE-2022-42919AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2022-42919AdvisoryOval
access.redhat.com/errata/RHSA-2022:8493Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8493.jsonAdvisory
ubuntu.com/security/CVE-2022-42919REPORT
python-security.readthedocs.io/vuln/multiprocessing-abstract-socket.htmlREPORT
ubuntu.com/security/notices/USN-5713-1Advisory
ubuntu.com/security/notices/USN-5888-1Advisory
ubuntu.com/security/notices/USN-6891-1Advisory
security-tracker.debian.org/tracker/CVE-2022-42919Advisory
www.suse.com/security/cve/CVE-2022-42919WEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities