CVE-2019-17080

EPSS 8.2%

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

Affected products

n/a · n/a

public PoCs found — 4

githubgithub.com/Andhrimnirr/Mintinstall-object-injection★ 1 githubgithub.com/materaj2/Mintinstall-object-injection★ 0 cve_referencepacketstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.htmlunverified exploitdbwww.exploit-db.com/exploits/47457unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html https://forums.linuxmint.com/viewtopic.php?f=143&t=302960 https://github.com/Andhrimnirr/Mintinstall-object-injection https://github.com/linuxmint/mintinstall/blob/master/debian/changelog