CVE-2024-3568
published 2024-04-10CVE-2024-3568: The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()`…
PriorityP259critical9.6CVSS 3.1
AVNACLPRNUIRSCCHIHAH
EPSS
2.07%
79.0th percentile
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huggingface | huggingface_transformers | >= unspecified < 4.38 | 4.38 |
| huggingface | transformers | < 4.38.0 | 4.38.0 |
| huggingface | transformers | >= 0 < 4.38.0 | 4.38.0 |
CVSS provenance
nvdv3.19.6CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvdv3.03.4LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Transformers Deserialization of Untrusted Data vulnerability
ghsa·2024-04-10
CVE-2024-3568 [LOW] CWE-502 Transformers Deserialization of Untrusted Data vulnerability
Transformers Deserialization of Untrusted Data vulnerability
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
OSV
Transformers Deserialization of Untrusted Data vulnerability
osv·2024-04-10
CVE-2024-3568 [LOW] Transformers Deserialization of Untrusted Data vulnerability
Transformers Deserialization of Untrusted Data vulnerability
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
Suricata
ET EXPLOIT Possible Linksys WRT100/110 RCE Attempt (CVE-2013-3568)
suricata·2019-03-19·CVSS 8.8
CVE-2013-3568 [HIGH] ET EXPLOIT Possible Linksys WRT100/110 RCE Attempt (CVE-2013-3568)
ET EXPLOIT Possible Linksys WRT100/110 RCE Attempt (CVE-2013-3568)
Rule: alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Possible Linksys WRT100/110 RCE Attempt (CVE-2013-3568)"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/ping.cgi"; startswith; endswith; http.request_body; content:"pingstr="; startswith; fast_pattern; content:"|3b|"; within:25; reference:cve,2013-3568; reference:url,www.exploit-db.com/exploits/28484; classtype:attempted-user; sid:2027097; rev:6; metadata:attack_target IoT, created_at 2019_03_19, cve CVE_2013_3568, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2024_04_13;)
No public exploits indexed.
https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8fhttps://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8f
2024-04-10
Published