CVE Vulnerabilities

CVE-2016-1239

Published: Feb 19, 2022 | Modified: Mar 01, 2022

CVSS 3.x

9.8

CRITICAL

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.x

7.5 HIGH

RedHat/V2

RedHat/V3

Ubuntu

LOW

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-1239
CWE	https://cwe.mitre.org/data/definitions/.html

duck before 0.10 did not properly handle loading of untrusted code from the current directory.

Affected Software

Name	Vendor	Start Version	End Version
Duck	Debian	*	0.10 (excluding)
Duck	Ubuntu	artful	*
Duck	Ubuntu	upstream	*
Duck	Ubuntu	wily	*
Duck	Ubuntu	xenial	*
Duck	Ubuntu	yakkety	*
Duck	Ubuntu	zesty	*

References

https://salsa.debian.org/debian/duck/-/commit/b43b5bbf07973c54b8f1c581a941f4facc97177a

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.