Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-5093HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-5093
2022-10-0316:14:53
Debian Security Bug Tracker
security-tracker.debian.org
5
graphite
remote code execution
cve-2013-5093
serialized object
python module
renderlocalview
unix
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.969 High
EPSS
Percentile
99.7%
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | graphite-web | < 0.9.12+debian-1 | graphite-web_0.9.12+debian-1_all.deb |
| Debian | 999 | all | graphite-web | < 0.9.12+debian-1 | graphite-web_0.9.12+debian-1_all.deb |
| Debian | 13 | all | graphite-web | < 0.9.12+debian-1 | graphite-web_0.9.12+debian-1_all.deb |
Related
openvas
openvas
Fedora Update for graphite-web FEDORA-2013-15713
2013-09-24 00:00:00
Fedora Update for graphite-web FEDORA-2013-15713
2013-09-24 00:00:00
Fedora Update for graphite-web FEDORA-2013-15710
2013-09-24 00:00:00
osv
osv
PYSEC-2013-3
2013-09-27 10:08:00
graphite-web is vulnerable to Remote Code Execution via renderLocalView function
2022-05-17 05:03:05
graphite-web is vulnerable to Remote Code Execution
2022-05-17 05:03:05
cve
cve
checkpoint_advisories
checkpoint_advisories
Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)
2013-10-27 00:00:00
nessus
nessus
Fedora 18 : graphite-web-0.9.12-1.fc18 (2013-15713)
2013-09-19 00:00:00
Fedora 19 : graphite-web-0.9.12-1.fc19 (2013-15710)
2013-09-19 00:00:00
prion
prion
Authentication flaw
2013-09-27 10:08:00
Design/Logic Flaw
2013-09-27 10:08:00
Design/Logic Flaw
2013-09-23 19:55:00
github
github
graphite-web is vulnerable to Remote Code Execution via renderLocalView function
2022-05-17 05:03:05
graphite-web is vulnerable to Remote Code Execution
2022-05-17 05:03:05
zdt
zdt
Graphite Web Unsafe Pickle Handling Exploit
2013-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18
2013-09-18 13:01:50
[SECURITY] Fedora 19 Update: graphite-web-0.9.12-1.fc19
2013-09-18 13:00:38
cvelist
cvelist
CVE-2013-5093
2022-10-03 16:14:53
CVE-2013-5942
2022-10-03 16:14:55
packetstorm
packetstorm
Graphite Web Unsafe Pickle Handling
2013-08-21 00:00:00
nvd
nvd
ubuntucve
ubuntucve
CVE-2013-5093
2013-09-27 00:00:00
CVE-2013-5942
2013-09-27 00:00:00
debiancve
debiancve
CVE-2013-5942
2022-10-03 16:14:55
freebsd
freebsd
py-graphite-web -- Multiple vulnerabilities
2013-08-21 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.969 High
EPSS
Percentile
99.7%
Related for DEBIANCVE:CVE-2013-5093