Upstream information
Description
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
| National Vulnerability Database | |
|---|---|
| Base Score | 4.6 |
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| Access Vector | Local |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | Partial |
| Availability Impact | Partial |
| National Vulnerability Database | SUSE | |
|---|---|---|
| Base Score | 8.8 | 8.8 |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| Attack Vector | Local | Local |
| Attack Complexity | Low | Low |
| Privileges Required | Low | Low |
| User Interaction | None | None |
| Scope | Changed | Changed |
| Confidentiality Impact | High | High |
| Integrity Impact | High | High |
| Availability Impact | High | High |
| CVSSv3 Version | 3.1 | 3.1 |
SUSE Security Advisories:
- openSUSE-SU-2022:10043-1, published Fri Jul 8 04:43:17 2022
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Package Hub 15 SP3 |
| Patchnames: openSUSE-2022-10043 |
| openSUSE Leap 15.3 |
| Patchnames: openSUSE-2022-10043 |
| openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA python310-ipython-8.0.1-1.1 openSUSE Tumbleweed GA spyder-5.3.0-1.1 |
SUSE Timeline for this CVE
CVE page created: Thu Jan 20 03:00:09 2022CVE page last modified: Tue May 23 18:22:19 2023