From 9a3cab02e027da1752a7f58d63c8e09ebc772601 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 11 Mar 2025 20:09:24 +0000 Subject: [PATCH] Publish Advisories GHSA-fg9q-5cw2-p6r9 GHSA-48g7-3x6r-xfhp GHSA-5478-v2w6-c6q7 --- .../GHSA-fg9q-5cw2-p6r9.json | 37 +++++++++- .../GHSA-48g7-3x6r-xfhp.json | 73 +++++++++++++++++++ .../GHSA-5478-v2w6-c6q7.json | 11 ++- 3 files changed, 111 insertions(+), 10 deletions(-) rename advisories/{unreviewed => github-reviewed}/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json (61%) create mode 100644 advisories/github-reviewed/2025/03/GHSA-48g7-3x6r-xfhp/GHSA-48g7-3x6r-xfhp.json diff --git a/advisories/unreviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json b/advisories/github-reviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json similarity index 61% rename from advisories/unreviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json rename to advisories/github-reviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json index 189821e76f7..fc0fb76a927 100644 --- a/advisories/unreviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json +++ b/advisories/github-reviewed/2024/03/GHSA-fg9q-5cw2-p6r9/GHSA-fg9q-5cw2-p6r9.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-fg9q-5cw2-p6r9", - "modified": "2024-05-08T03:30:37Z", + "modified": "2025-03-11T20:07:55Z", "published": "2024-03-07T21:30:21Z", "aliases": [ "CVE-2024-1725" ], + "summary": "kubevirt-csi: PersistentVolume allows access to HCP's root node", "details": "A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.", "severity": [ { @@ -13,12 +14,36 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/kubevirt/csi-driver" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.0.0-202403081943-cc28dcbb0afc14" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1725" }, + { + "type": "WEB", + "url": "https://github.com/kubevirt/csi-driver/commit/cc28dcbb0afca0a7cb8a73bc998ab49f864ed560" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:1559" @@ -38,6 +63,10 @@ { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265398" + }, + { + "type": "PACKAGE", + "url": "https://github.com/kubevirt/csi-driver" } ], "database_specific": { @@ -45,8 +74,8 @@ "CWE-501" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-11T20:07:55Z", "nvd_published_at": "2024-03-07T20:15:50Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2025/03/GHSA-48g7-3x6r-xfhp/GHSA-48g7-3x6r-xfhp.json b/advisories/github-reviewed/2025/03/GHSA-48g7-3x6r-xfhp/GHSA-48g7-3x6r-xfhp.json new file mode 100644 index 00000000000..29e92ffa7fb --- /dev/null +++ b/advisories/github-reviewed/2025/03/GHSA-48g7-3x6r-xfhp/GHSA-48g7-3x6r-xfhp.json @@ -0,0 +1,73 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-48g7-3x6r-xfhp", + "modified": "2025-03-11T20:07:32Z", + "published": "2025-03-11T20:07:32Z", + "aliases": [ + "CVE-2025-1550" + ], + "summary": "Arbitrary Code Execution via Crafted Keras Config for Model Loading", + "details": "### Impact\n\nThe Keras `Model.load_model` function permits arbitrary code execution, even with `safe_mode=True`, through a manually constructed, malicious `.keras` archive. By altering the `config.json` file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.\n\n### Patches\n\nThis problem is fixed starting with version `3.9`.\n\n### Workarounds\n\nOnly load models from trusted sources and model archives created with Keras.\n\n### References\n\n- https://www.cve.org/cverecord?id=CVE-2025-1550\n- https://github.com/keras-team/keras/pull/20751", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "keras" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "3.0.0" + }, + { + "fixed": "3.9.0" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/security/advisories/GHSA-48g7-3x6r-xfhp" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1550" + }, + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/pull/20751" + }, + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/commit/e67ac8ffd0c883bec68eb65bb52340c7f9d3a903" + }, + { + "type": "PACKAGE", + "url": "https://github.com/keras-team/keras" + }, + { + "type": "WEB", + "url": "https://github.com/keras-team/keras/releases/tag/v3.9.0" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2025-03-11T20:07:32Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json b/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json index 12fc9cfa168..378e6b655ed 100644 --- a/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json +++ b/advisories/github-reviewed/2025/03/GHSA-5478-v2w6-c6q7/GHSA-5478-v2w6-c6q7.json @@ -1,13 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-5478-v2w6-c6q7", - "modified": "2025-03-11T16:17:06Z", + "modified": "2025-03-11T20:07:24Z", "published": "2025-03-11T09:30:30Z", - "aliases": [ - "CVE-2025-1550" - ], - "summary": "Keras arbitrary code execution vulnerability", - "details": "The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.", + "withdrawn": "2025-03-11T20:07:23Z", + "aliases": [], + "summary": "Duplicate Advisory: Keras arbitrary code execution vulnerability", + "details": "# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-48g7-3x6r-xfhp. This link is maintained to preserve external references.\n\n# Original Description\n\nThe Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.", "severity": [ { "type": "CVSS_V4",