CVE-2013-5942
27.09.2013, 10:08
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/datalib.py, and (4) whitelist/views.py, a different vulnerability than CVE-2013-5093.
| Vendor | Product | Version |
|---|---|---|
| graphite_project | graphite | 0.9.5 |
| graphite_project | graphite | 0.9.6 |
| graphite_project | graphite | 0.9.7 |
| graphite_project | graphite | 0.9.8 |
| graphite_project | graphite | 0.9.9 |
| graphite_project | graphite | 0.9.10 |
𝑥
= Vulnerable software versions
Debian Releases
