A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - pyxdg: code injection via crafted python code (CVE-2019-12761)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2997-1 advisory.

  - A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element     of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing     within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an     eval call. (CVE-2019-12761)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2727 advisory.

  - A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element     of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing     within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an     eval call. (CVE-2019-12761)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4700-1 advisory.

    Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this     with a crafted .menu file to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that there was a code injection issue in PyXDG, a library used to locate 'FreeDesktop.org' configuration/cache/etc.
directories.

A lack of sanitisation allowed arbitrary Python code embedded in the Category element of a Menu XML document in a .menu file to be executed.

For Debian 8 'Jessie', this issue has been fixed in pyxdg version 0.25-4+deb8u1.

We recommend that you upgrade your pyxdg packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198794	RHEL 8 : pyxdg (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
164663	SUSE SLES15 Security Update : python-pyxdg (SUSE-SU-2022:2997-1)	Nessus	SuSE Local Security Checks	high
152194	Debian DLA-2727-1 : pyxdg - LTS security update	Nessus	Debian Local Security Checks	high
145081	Ubuntu 16.04 LTS / 18.04 LTS : PyXDG vulnerability (USN-4700-1)	Nessus	Ubuntu Local Security Checks	high
125927	Debian DLA-1819-1 : pyxdg security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2019-12761

high

Tenable Plugins

high

high

high

high

high