Vulnerabilities > CVE-2019-17080 - Deserialization of Untrusted Data vulnerability in Linuxmint Mintinstall 7.9.9

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
linuxmint
CWE-502
exploit available
NVD
Published: 2019-10-02
Updated: 2019-10-08

Summary

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

Vulnerable Configurations

Part Description Count
Application
Linuxmint
1

Common Weakness Enumeration (CWE)

Exploit-Db

idEDB-ID:47457
last seen2019-10-03
modified2019-10-03
published2019-10-03
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/47457
titlemintinstall 7.9.9 - Code Execution

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/154722/mintinstall799-exec.txt
idPACKETSTORM:154722
last seen2019-10-03
published2019-10-02
reporterAndhrimnirr
sourcehttps://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
titlemintinstall 7.9.9 Code Execution

References