Required CVE Record Information
Description
S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
References 3 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- https://bitbucket.org/nikratio/s3ql/commits/091ac263809b4e8 x_transferred
- debian.org: DSA-3013 vendor-advisoryx_transferred
- openwall.com: [oss-security] 20140828 CVE-2014-0485: unsafe Python pickle in s3ql mailing-listx_transferred