DEBIAN-CVE-2014-0485

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2014-0485

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2014-0485.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2014-0485

Upstream

CVE-2014-0485

Published

2014-09-02T14:55:03Z

Modified

2025-09-19T06:18:35Z

Summary

[none]

Details

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.

References

https://security-tracker.debian.org/tracker/CVE-2014-0485

Affected packages

Debian:13 / s3ql

Package

Name: s3ql
Purl: pkg:deb/debian/s3ql?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.1+dfsg-4

Ecosystem specific

{
    "urgency": "high"
}

Debian:14 / s3ql

Package

Name: s3ql
Purl: pkg:deb/debian/s3ql?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.1+dfsg-4

Ecosystem specific

{
    "urgency": "high"
}