NVD

Id
35369  
Name
CVE-2014-8165  
Description
scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-19  
Modified Date
2015-02-20  
Seq
2014-8165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181322 35369 CVE-2014-8165 [Powerpc-utils-devel] 20140930 [RFC PATCH] amsvis/amsnet: Replace pickle with json  View
181323 35369 CVE-2014-8165 [oss-security] 20150209 CVE-2014-8165: remote code execution in powerpc-utils-python  View
181324 35369 CVE-2014-8165 72537  View
181325 35369 CVE-2014-8165 powerpcutils-cve20148165-code-exec(100788)  View
181326 35369 CVE-2014-8165 https://bugzilla.redhat.com/show_bug.cgi?id=1073139  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19053 JVNDB-2014-007928 powerpc-utils-python の scripts/amsvis/powerpcAMS/amsnet.py における任意のコードを実行される脆弱性 powerpc-utils-python の scripts/amsvis/powerpcAMS/amsnet.py は、危険な方法で pickle Python モジュールを使用するため、任意のコードを実行される脆弱性が存在します。 CVE-2014-8165 75458 CVE-2014-8165 35369 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007928.html 2014-09-30 2015-02-24 View