powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
BID:72537
Info
powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
| Bugtraq ID: | 72537 |
| Class: | Design Error |
| CVE: |
CVE-2014-8165 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2015 12:00AM |
| Updated: | Dec 20 2016 01:09AM |
| Credit: | Dhiru Kholia of Red Hat Product Security Team |
| Vulnerable: |
Powerpc-Utils Project Powerpc-Utils 0 IBM PowerKVM 3.1 IBM PowerKVM 2.1 |
| Not Vulnerable: | |
Discussion
powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
powerpc-utils is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
powerpc-utils is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
Exploit / POC
powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
powerpc-utils CVE-2014-8165 Remote Code Execution Vulnerability
References:
References:
- [Powerpc-utils-devel] [RFC PATCH] amsvis/amsnet: Replace pickle with json (Dhiru Kholia)
- powerpc-utils Homepage (powerpc-utils)
- Bug 1073139 - (CVE-2014-8165) CVE-2014-8165 powerpc-utils-python: arbitrary code (bugzilla)
- isg3T1024540: A vulnerability in powerpc-utils-python affects PowerKVM (CVE-2014 (IBM)