CVE-2011-4356
published 2011-12-05CVE-2011-4356: Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid…
PriorityP420medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.35%
26.9th percentile
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | — | — |
| celeryproject | celery | >= 0 < 2.4.6-1 | 2.4.6-1 |
| celeryproject | celery | >= 0 < 2.4.6-1 | 2.4.6-1 |
| celeryproject | celery | >= 0 < 2.4.6-1 | 2.4.6-1 |
| celeryproject | celery | >= 0 < 2.4.6-1 | 2.4.6-1 |
| celeryproject | celery | >= 2.1.0 < 2.2.8 | 2.2.8 |
| celeryproject | celery | >= 2.3.0 < 2.3.4 | 2.3.4 |
| celeryproject | celery | >= 2.4.0 < 2.4.4 | 2.4.4 |
| debian | celery | < celery 2.4.6-1 (bookworm) | celery 2.4.6-1 (bookworm) |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv6.9MEDIUM
vendor_debian6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Celery local privilege escalation vulnerability
ghsa·2022-05-17
CVE-2011-4356 [MEDIUM] CWE-269 Celery local privilege escalation vulnerability
Celery local privilege escalation vulnerability
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
OSV
Celery local privilege escalation vulnerability
osv·2022-05-17
CVE-2011-4356 [MEDIUM] Celery local privilege escalation vulnerability
Celery local privilege escalation vulnerability
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
OSV
CVE-2011-4356: Celery 2
osv·2011-12-05·CVSS 6.9
CVE-2011-4356 [MEDIUM] CVE-2011-4356: Celery 2
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
Debian
CVE-2011-4356: celery - Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes ...
vendor_debian·2011·CVSS 6.9
CVE-2011-4356 [MEDIUM] CVE-2011-4356: celery - Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes ...
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving crafted code that is executed by the worker process.
Scope: local
bookworm: resolved (fixed in 2.4.6-1)
bullseye: resolved (fixed in 2.4.6-1)
forky: resolved (fixed in 2.4.6-1)
sid: resolved (fixed in 2.4.6-1)
trixie: resolved (fixed in 2.4.6-1)
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/46973http://www.securityfocus.com/bid/50825https://github.com/ask/celery/blob/master/docs/sec/CELERYSA-0001.txthttps://github.com/ask/celery/pull/544http://secunia.com/advisories/46973http://www.securityfocus.com/bid/50825https://github.com/ask/celery/blob/master/docs/sec/CELERYSA-0001.txthttps://github.com/ask/celery/pull/544
2011-12-05
Published