CVE-2015-1326: Improper Input Validation in python-dbusmock

April 23, 2019 (updated October 15, 2024)

python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.

References

github.com/advisories/GHSA-74xw-82v7-hmrm
github.com/martinpitt/python-dbusmock
github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
github.com/pypa/advisory-database/tree/main/vulns/python-dbusmock/PYSEC-2019-155.yaml
nvd.nist.gov/vuln/detail/CVE-2015-1326

Code Behaviors & Features

Detect and mitigate CVE-2015-1326 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →