CVE-2015-1326

python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp

Medium · published April 22, 2019

CVSS v3.0
5.7
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.

The record
Technical detail
CVSS v3.0
5.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01824 · 78.6th percentile
Published
2019-04-22T15:35Z
EPSS history
Timeline
  • 22 APR 15:35Z
    python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp
    cvelistv5