rpm package
opensuse/python-rpyc&distro=openSUSE Leap 15.5
pkg:rpm/opensuse/python-rpyc&distro=openSUSE%20Leap%2015.5
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-27758 | Hig | 8.4 | < 4.1.5-bp155.3.3.1 | 4.1.5-bp155.3.3.1 | Mar 12, 2024 | In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution. |
- affected < 4.1.5-bp155.3.3.1fixed 4.1.5-bp155.3.3.1
In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution.