Search vulnerabilities

Results 1

Export CSV
CVE-2011-2520

system-config-firewall: privilege escalation flaw via use of python pickle

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed