Описание
An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pyro | removed | package |
Примечания
https://github.com/Sif-0x01/security-advisories/security/advisories/GHSA-7625-w9h5-83rv
This is specific to Pyro 3, later versions of Pyro as packaged in Debian
as src:pyro4 and src:pyro5 use the serpent serialiser, which is not affected
Связанные уязвимости
CVSS3: 9.8
ubuntu
4 месяца назад
An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.
CVSS3: 9.8
nvd
4 месяца назад
An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.