Skip to content
OpenAdvisories
Medium USN-2618-1 1 CVE

python-dbusmock vulnerability

Published May 21, 2015 · Updated Feb 10, 2026

Summary

It was discovered that python-dbusmock incorrectly handled template
loading from shared directories. A local attacker could possibly use this
issue to execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS python-dbusmock 0.10.1-1ubuntu1

Vulnerabilities 1

  • Medium 5.7

    python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp

    python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.

References

  • report
    https://ubuntu.com/security/CVE-2015-1326