CVE-2015-1326: Improper Input Validation in python-dbusmock

April 23, 2019 (updated October 15, 2024)

python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.

References

github.com/advisories/GHSA-74xw-82v7-hmrm
github.com/martinpitt/python-dbusmock
github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
github.com/pypa/advisory-database/tree/main/vulns/python-dbusmock/PYSEC-2019-155.yaml
nvd.nist.gov/vuln/detail/CVE-2015-1326

Detect and mitigate CVE-2015-1326 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →