~ubuntu-security/ubuntu-cve-tracker/master

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Candidate: CVE-2014-8165
PublicDate: 2015-02-19
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8165
 http://sourceforge.net/p/powerpc-utils/mailman/message/32884230
Description:
 scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle
 Python module unsafely, which allows remote attackers to execute arbitrary
 code via a crafted serialized object.
Ubuntu-Description:
Notes:
 sarnold> Pickle code not present in our packages
Bugs:
Priority: medium
Discovered-by:
Assigned-to:

Patches_powerpc-utils:
 upstream: http://sourceforge.net/p/powerpc-utils/mailman/message/32884230/
upstream_powerpc-utils: needs-triage
lucid_powerpc-utils: ignored (reached end-of-life)
precise_powerpc-utils: not-affected
trusty_powerpc-utils: not-affected
utopic_powerpc-utils: not-affected
devel_powerpc-utils: not-affected