PT-2019-4265

CVE-2019-17080

Publicado

2019-10-02

Atualizado

2019-10-08

Descrição por

CVSS 2.0

Alta

MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mintinstall (aka Software Manager) versions 7.9.9

Description The issue is related to the REVIEWS CACHE component of the mintinstall software manager, which is vulnerable to exploitation due to the restoration of untrusted data in memory. This could allow a remote attacker to execute arbitrary code if they control a REVIEWS CACHE file, as it undergoes an unpickle operation.

Recommendations For mintinstall version 7.9.9, update to version 8.0.0 or apply available backports to resolve the issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-502: Deserialization of Untrusted Data

Identificadores relacionados

CVE-2019-17080