PT-2019-18633 · Ipycache · Ipycache

Bigbigliang-Malwarebenchmark · Published 2019-03-21 · Updated 2021-07-21 · CVE-2019-7539

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions ipycache versions up to 0.1.4

Description A code injection issue was discovered.

Recommendations For ipycache versions up to 0.1.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Deserialization of Untrusted Data

Code Injection

Weakness Enumeration

CWE-502

CWE-94

Related Identifiers

CVE-2019-7539

GHSA-GCM4-Q2PG-XW89

PYSEC-2019-180

Affected Products

Ipycache

References · 10

• 🔥 https://github.com/rossant/ipycache/issues/47 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7539 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7539 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gcm4-q2pg-xw89 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-180 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/ipycache/PYSEC-2019-180.yaml · Note
• https://github.com/rossant/ipycache · Note
• https://github.com/advisories/GHSA-gcm4-q2pg-xw89 · Note
• https://github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753 · Note
• https://github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e · Note