PT-2019-18633 · Ipycache · Ipycache

Bigbigliang-Malwarebenchmark · Publicado 2019-03-21 · Atualizado 2021-07-21 · CVE-2019-7539

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions ipycache versions up to 0.1.4

Description A code injection issue was discovered.

Recommendations For ipycache versions up to 0.1.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Deserialization of Untrusted Data

Code Injection

Enumeração de Fraquezas

CWE-502

CWE-94

Identificadores relacionados

CVE-2019-7539

GHSA-GCM4-Q2PG-XW89

PYSEC-2019-180

Produtos afetados

Ipycache

Referências · 10

• 🔥 https://github.com/rossant/ipycache/issues/47 · Exploit
• https://github.com/pypa/advisory-database/tree/main/vulns/ipycache/PYSEC-2019-180.yaml · Nota
• https://github.com/rossant/ipycache · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-7539 · Nota de Segurança
• https://github.com/advisories/GHSA-gcm4-q2pg-xw89 · Nota
• https://osv.dev/vulnerability/CVE-2019-7539 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-gcm4-q2pg-xw89 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2019-180 · Aviso do Fabricante
• https://github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753 · Nota
• https://github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e · Nota