Skip to main content

Deserialization of Untrusted Data

CVE-2024-34072

High
7.8/10

Summary

sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. This issue affects versions prior to v2.218.0. The `sagemaker.base_deserializers.NumpyDeserializer` module prior to v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently may allow an unprivileged third party to cause Remote Code Execution, Denial of Service, affecting both confidentiality and integrity. Users are advised to upgrade to version 2.218.0 or later. Users unable to upgrade should not pass pickled numpy object arrays which originated from an untrusted source, or that could have been tampered with. Only pass pickled numpy object arrays from trusted sources.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • HIGH

CWE-502 - Deserialization of Untrusted Data

Deserialization of untrusted data vulnerabilities enable an attacker to replace or manipulate a serialized object, replacing it with malicious data. When the object is deserialized at the victim's end the malicious data is able to compromise the victim’s system. The exploit can be devastating, its impact may range from privilege escalation, broken access control, or denial of service attacks to allowing unauthorized access to the application's internal code and logic which can compromise the entire system.

References

Advisory Timeline

  • Published