DEBIAN-CVE-2014-0485

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2014-0485
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-0485.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2014-0485
Upstream
Published
2014-09-02T14:55:03.323Z
Modified
2025-11-14T04:01:04.194183Z
Summary
[none]
Details

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.

References

Affected packages

Debian:13 / s3ql

Package

Name
s3ql
Purl
pkg:deb/debian/s3ql?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.10.1+dfsg-4

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-0485.json"

Debian:14 / s3ql

Package

Name
s3ql
Purl
pkg:deb/debian/s3ql?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.10.1+dfsg-4

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-0485.json"