Command Injection in py3-virtualenv - CVE-2024-53899

Vulnerability identifier: #VU101032

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-53899

CWE-ID: CWE-77

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper input validation when handling magic templates strings in activation scripts. A local user can pass specially crafted value via an environment variable to the affected script and execute arbitrary OS commands on the system.

py3-virtualenv
Guardium Data Security Center (GDSC)
watsonx Code Assistant for Ansible
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Fedora
Python 3 Module
Development Tools Module
openSUSE Leap
Ubuntu
openEuler
Oracle Solaris
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
virtualenv (Ubuntu package)
python3-virtualenv (Ubuntu package)
uv
python3-PyMySQL
python3-docutils
python3-wheel
python3-wheel-wheel
python3-scipy
python-sqlalchemy-doc
python3-sqlalchemy
python3-nose
python-nose-docs
python3-distro
python3-pygments
python3-docs
python36-rpm-macros
python36-debug
python36-devel
python36
python3-pymongo-gridfs
python-pymongo-doc
python3-pymongo
python3-bson
python-virtualenv
python-virtualenv (Red Hat package)
python3-virtualenv
python-virtualenv-doc
python311-virtualenv
python3-virtualenv-doc

Install updates from vendor's website.

py3-virtualenv - update to 20.26.6
Guardium Data Security Center (GDSC) - update to 3.8.5
virtualenv (Ubuntu package) - update to Ubuntu Pro
python3-virtualenv (Ubuntu package) - update to Ubuntu Pro
uv - addressed in versions 0.5.4-2.fc40, 0.5.4-2.fc41
python3-PyMySQL - update to 0.10.1-2
python3-docutils - update to 0.14-12
python3-wheel - update to 0.31.1-3
python3-wheel-wheel - update to 0.31.1-3
python3-scipy - update to 1.0.0-21
python-sqlalchemy-doc - update to 1.3.2-3
python3-sqlalchemy - update to 1.3.2-3
python3-nose - update to 1.3.7-31
python-nose-docs - update to 1.3.7-31
python3-distro - update to 1.4.0-2
python3-pygments - update to 2.2.0-22
python3-docs - update to 3.6.7-2
python36-rpm-macros - update to 3.6.8-39
python36-debug - update to 3.6.8-39
python36-devel - update to 3.6.8-39
python36 - update to 3.6.8-39
python3-pymongo-gridfs - update to 3.7.0-1.0.1
python-pymongo-doc - update to 3.7.0-1.0.1
python3-pymongo - update to 3.7.0-1.0.1
python3-bson - update to 3.7.0-1.0.1
watsonx Code Assistant for Ansible - update to 5.1.1
Oracle Solaris - update to 11.4 SRU 77
python-virtualenv - update to 15.1.0-7
python-virtualenv (Red Hat package) - update to 15.1.0-7.el7_9.1
python3-virtualenv - addressed in versions 15.1.0-23, 20.28.0-1
python-virtualenv-doc - update to 15.1.0-23
python3-virtualenv - update to 20.17.1-150600.3.5.1
python-virtualenv - update to 20.21.1-14.el9
python311-virtualenv - update to 20.22.0-150400.9.6.1
python3-virtualenv - update to 20.26.6-1
python-virtualenv - update to 20.26.6-1
python3-virtualenv-doc - update to 20.28.0-1

• https://github.com/pypa/virtualenv/issues/2768
• https://github.com/pypa/virtualenv/pull/2771
• https://github.com/pypa/virtualenv/releases/tag/20.26.6

• Privilege escalation in Python virtualenv module
• Fedora 41 update for uv
• Fedora 40 update for uv
• SUSE update for python-virtualenv
• SUSE update for python3-virtualenv
• Fedora EPEL 9 update for python-virtualenv
• Red Hat Enterprise Linux 8 update for the python36:3.6 module
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for python-virtualenv
• Red Hat Enterprise Linux 8 update for the python36:3.6 module
• Red Hat Enterprise Linux 8 update for the python36:3.6 module
• Red Hat Enterprise Linux 8 update for the python36:3.6 module
• Red Hat Enterprise Linux 8 update for the python36:3.6 module
• Oracle Solaris update for third-party components
• Ubuntu update for python-virtualenv
• Ubuntu update for python-virtualenv
• openEuler 24.03 LTS update for python-virtualenv
• Multiple vulnerabilities in IBM watsonx Code Assistant On Prem
• Anolis OS update for python36:3.6 module
• Anolis OS update for python-virtualenv
• Anolis OS update for python-virtualenv
• Multiple vulnerabilities in IBM Guardium Data Security Center