=====================================================================

                                 CERT-Renater

                     Note d'Information No. 2022/VULN309

_____________________________________________________________________

DATE                : 01/09/2022

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running NVIDIA NVFLARE versions
                                prior to 2.1.4.

=====================================================================
https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-6qv6-q77g-7qm6
_____________________________________________________________________


NVFLARE unsafe deserialization due to Pickle
Critical
chesterxgchen published GHSA-6qv6-q77g-7qm6 Aug 22, 2022

Package
nvflare (pip)

Affected versions
< 2.1.4

Patched versions
2.1.4


Description

Impact

NVFLARE contains a vulnerability where deserialization of
Untrusted Data due to Pickle usage may allow an unprivileged
network attacker to cause Remote Code Execution, Denial Of Service,
and Impact to both Confidentiality and Integrity.

All versions before 2.1.4 are affected.

CVSS Score = 9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H


Patches

The patch is included in nvflare==2.1.4
This new version uses MessagePack instead of Pickle to do
serialization and deserialization.

Some object serializations supported by Pickle are not supported by
MessagePack. We have provided out of box support for some built-in
NVFLARE objects. For object serializations unsupported by MessagePack,
the user will need to convert the objects to numpy or bytes before
sending over to remote machines. The list of supported object types
are listed in
https://github.com/NVIDIA/NVFlare/blob/2.1/nvflare/fuel/utils/fobs/README.rst


Workarounds

No workarounds available.


Additional information

Issue Found by: Oliver Sellwood (Nintorac) and Elias Hohl

Severity
Critical

CVE ID
CVE-2022-34668

Weaknesses
CWE-502


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================