p PatchFirst

CVE-2024-48911

CVE-2024-48911 · OpenCanary Executes Commands From Potentially Writable Config File

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon. Version 0.9.4 contains a fix for the issue.

CVSS 5.8 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • opencanary

    Versions
    • < 0.9.4: Affected

    No fix published

  • opencanary PyPI

    Versions
    • 0.2
    • 0.3
    • 0.3.1
    • 0.3.2
    • 0.4
    • 0.5
    • 0.5.1
    • 0.5.2
    • 0.5.4
    • 0.5.5
    • 0.5.6
    • 0.5.7
    • 0.5.8
    • 0.6.0
    • 0.6.1
    • 0.6.2
    • 0.6.3
    • 0.7.1
    • 0.9.0
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.4
    Affected ranges
    • ECOSYSTEM: < 0.9.5

    Update to 0.9.5

  • opencanary PyPI

    Versions
    • 0.2
    • 0.3
    • 0.3.1
    • 0.3.2
    • 0.4
    • 0.5
    • 0.5.1
    • 0.5.2
    • 0.5.4
    • 0.5.5
    • 0.5.6
    • 0.5.7
    • 0.5.8
    • 0.6.0
    • 0.6.1
    • 0.6.2
    • 0.6.3
    • 0.7.1
    • 0.9.0
    • 0.9.1
    • 0.9.2
    • 0.9.3
    Affected ranges
    • ECOSYSTEM: < 0.9.4

    Update to 0.9.4

Original sources

Check your server →