Wind River Support Network

HomeDefectsLIN1018-786

Fixed

LIN1018-786 : Security Advisory - python - CVE-2014-3539

Created: May 14, 2018 Updated: Apr 13, 2020

Resolved Date: Apr 13, 2020

Found In Version: unknown

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.

https://nvd.nist.gov/vuln/detail/CVE-2014-3539