crítica
CVE-2016-4972
openstack-murano: RCE via usage of insecure YAML tags
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, GHSA. Más baja según Red Hat (alta).
Descripción
OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| pip::GitHub Security Advisory pip | murano, murano-dashboard, python-muranoclient | 1.0.3 y 2 más |
| debian 11 | murano, murano-dashboard, python-muranoclient | 1:2.0.1-1 y 2 más |
| debian 12 | murano, murano-dashboard, python-muranoclient | 1:2.0.1-1 y 2 más |
| echo | murano, murano-dashboard, python-muranoclient | 1:2.0.1-1 y 2 más |
Mostrar las 12 entradas de 4 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| pip::GitHub Security Advisory pip | murano | 1.0.3 |
| pip::GitHub Security Advisory pip | murano-dashboard | 1.0.3, 2.0.1 |
| pip::GitHub Security Advisory pip | python-muranoclient | 0.7.3, 0.8.5 |
| debian 11 | murano | 1:2.0.1-1 |
| debian 11 | murano-dashboard | 1:2.0.0-5 |
| debian 11 | python-muranoclient | 0.8.3-4 |
| debian 12 | murano | 1:2.0.1-1 |
| debian 12 | murano-dashboard | 1:2.0.0-5 |
| debian 12 | python-muranoclient | 0.8.3-4 |
| echo | murano | 1:2.0.1-1 |
| echo | murano-dashboard | 1:2.0.0-5 |
| echo | python-muranoclient | 0.8.3-4 |
Referencias
- http://www.openwall.com/lists/oss-security/2016/06/23/8
- https://access.redhat.com/security/cve/CVE-2016-4972
- https://bugs.launchpad.net/murano/+bug/1586079
- https://bugs.launchpad.net/python-muranoclient/+bug/1586078
- https://github.com/openstack/murano
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/notes/safeloader-cve-2016-4972-19035a2a091ec30a.yaml
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
- https://github.com/openstack/murano/commit/28de8c36c9dbe4aaf4d062e6fb6099afd437f49b