PT-2019-4265
CVE-2019-17080
·
تاريخ النشر
2019-10-02
·
تاريخ التحديث
2019-10-08
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
mintinstall (aka Software Manager) versions 7.9.9
Description
The issue is related to the REVIEWS CACHE component of the mintinstall software manager, which is vulnerable to exploitation due to the restoration of untrusted data in memory. This could allow a remote attacker to execute arbitrary code if they control a REVIEWS CACHE file, as it undergoes an unpickle operation.
Recommendations
For mintinstall version 7.9.9, update to version 8.0.0 or apply available backports to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾