CVE-2014-3429 IPython Notebook vulnerable to improper validation of the origin of websocket requests
Remote attackers can execute arbitrary code in IPython Notebook by exploiting unvalidated websocket origins and kernel IDs via a crafted page.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2014-3429?
CVE-2014-3429 is a medium-severity code injection vulnerability in Opensuse Opensuse, published on 7 Aug 2014. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Weakness: CWE-94
Which versions are affected by CVE-2014-3429?
3 open source packages ship an affected version, including ipython. It affects 3 products.
| Package | Affected | Fixed in |
|---|---|---|
ipython PyPI | From 0.12 | 1.2.0 |
ipython PyPI | From 0.12 | 1.2.0 |
ipython PyPI | From 0.12 | 1.2.0 |
Products include Ipython Ipython Notebook, Mageia Mageia, Opensuse Opensuse.
How do I fix CVE-2014-3429?
Upgrade ipython to 1.2.0 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2014-3429 being exploited?
There is no known exploitation of CVE-2014-3429 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2014-3429, GHSA-75cw-5cgv-g853, MGASA-2014-0320, PYSEC-2014-21.