CVE-2014-0485

2014-09-0214:55:00

Debian Security Bug Tracker

security-tracker.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

91.8%

JSON

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.

OSVersionArchitecturePackageVersionFilename
Debian10alls3ql< 2.10.1+dfsg-4s3ql_2.10.1+dfsg-4_all.deb
Debian999alls3ql< 2.10.1+dfsg-4s3ql_2.10.1+dfsg-4_all.deb