CVE-2023-5625

Regression in Red Hat python-eventlet caused patch for CVE-2021-21419 to fail.

• CVSS 7.5
• CWE-770
• Configuration Issues
• Remote

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

CVE

CVE-2023-5625

CWE

CWE-770

CVSS base score

7.5

Published

2023-11-01

OWASP

A09 Security Logging and Monitoring Failures

Orthogonal defect classification

Build/Package/Merge

Code defect classification

Building Issues

Category

Configuration Issues

Subcategory

Vulnerable and Outdated Components

Accessibility scope

Remote

Impact

Unauthorized Access

Fixed by upgrading

Yes

Solution

Upgrade to the latest version of python-eventlet that includes the patch for CVE-2021-21419.

import eventlet

def eventlet_function():
    
    def worker():
        print("Worker function is running")

    eventlet.spawn(worker)

    eventlet.sleep(1)

eventlet_function()

import eventlet

def eventlet_function():
    eventlet.monkey_patch()

    def worker():
        print("Worker function is running")

    eventlet.spawn(worker)

    eventlet.sleep(1)

eventlet_function()

# Example payload that could exploit the vulnerability
import eventlet

def exploit_vulnerability():
    # Create a vulnerable scenario due to missing patch
    def vulnerable_worker():
        # Potentially unsafe operation that could be exploited
        while True:
            print("Exploiting vulnerability...")

    # Spawn the vulnerable worker
    eventlet.spawn(vulnerable_worker)

    # Allow some time for the exploit to run
    eventlet.sleep(5)

exploit_vulnerability()

@misc{vaitp:cve20235625,
  title        = {{Regression in Red Hat python-eventlet caused patch for CVE-2021-21419 to fail.}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2023},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2023-5625},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2023-5625/}}
}