CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2019-17080

HIGH
7.8
CVSS Severity Score
EPSS Score0.0730%
EPSS Percentile16.49th
Published2019年10月2日
Last Modified2024年11月21日

Vulnerability Description

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

Affected Platforms (CPE)

📦
Linuxmint

Mintinstall

= 7.9.9

References & Advisories

🔗 http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
🔗 https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
🔗 https://github.com/Andhrimnirr/Mintinstall-object-injection
🔗 https://github.com/linuxmint/mintinstall/blob/master/debian/changelog
🔗 http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
🔗 https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
🔗 https://github.com/Andhrimnirr/Mintinstall-object-injection
🔗 https://github.com/linuxmint/mintinstall/blob/master/debian/changelog

相關漏洞威脅

CVE-2019-1068610.0

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port ...

CVE-2019-760910.0

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with acce...

CVE-2019-390510.0

Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.

CVE-2019-1151010.0

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated rem...