CVE-2014-0485
Publication date 2 September 2014
Last updated 24 July 2024
Ubuntu priority
Description
S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| s3ql | ||
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty | Not in release | |