high7.8Public exploit code
CVE-2019-17080
mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mintinstall 7.9.9 - Code Execution2019-10-03 · webapps · linux
Impact
mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxmint | Mintinstall | Version 7.9.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
- https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
- https://github.com/Andhrimnirr/Mintinstall-object-injection
- https://github.com/linuxmint/mintinstall/blob/master/debian/changelog
- http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
- https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
- https://github.com/Andhrimnirr/Mintinstall-object-injection
- https://github.com/linuxmint/mintinstall/blob/master/debian/changelog