CVE-2022-30284 json
Argument injection in python-libnmap
published 4y ago modified 4mo ago also GHSA-qwqv-j7jr-4hp6 , PYSEC-2022-42999 , EUVD-2022-0220
- cvss
- 9.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.6%
- EPSS 5.6% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments). NOTE: the vendor believes it would be unrealistic for an application to call NmapProcess with arguments taken from input data that arrived over an untrusted network, and thus the CVSS score corresponds to an unrealistic use case. None of the NmapProcess documentation implies that this is an expected use case
Patch / fix
- pypi python-libnmap 0.7.3
Is CVE-2022-30284 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- total
- Assessed
- 2y ago
Exploit prediction
5.57% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- swascan.com https://www.swascan.com/security-advisory-libnmap-2/ referenced PoC, tagged "exploit" by a source, unverified
- libnmap.readthedocs.io https://libnmap.readthedocs.io/en/latest/process.html#using-libnmap-process referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 9.0 | CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N |
| CNA | 3.1 | 9.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| GitHub | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | python-libnmap | <0.7.3 |
0.7.3 |
Classification
- Weakness
-
- CWE-88 Improper Neutralization of Argument Delimiters in a Command
References
-
github.com
/savon-noir/python-libnmap/commit/c36fecde90017befeb4853396d0e2aac93c95b64
web
-
swascan.com
/security-advisory-libnmap-2/
exploit, mitigation, third-party-advisory, evidence, advisory
-
libnmap.readthedocs.io
/en/latest/process.html#using-libnmap-process
web, exploit, third-party-advisory, evidence
-
pypi.org
/project/python-libnmap/
product, third-party-advisory, package
-
github.com
/savon-noir/python-libnmap/releases
web, release-notes, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2022-30284
advisory
-
github.com
/pypa/advisory-database/tree/main/vulns/python-libnmap/PYSEC-2022-42999.yaml
web
-
github.com
/savon-noir/python-libnmap
package
-
github.com
/savon-noir/python-libnmap/releases/tag/v0.7.3
web
-
pypi.org
/project/python-libnmap
web
-
swascan.com
/security-advisory-libnmap-2
web
-
github.com
/advisories/GHSA-qwqv-j7jr-4hp6
advisory
Sources
- CVE List CVE-2022-30284
- GitHub Advisory GHSA-qwqv-j7jr-4hp6
- NVD CVE-2022-30284
- OSV PYSEC-2022-42999
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.