CVE-2018-6353
CVE-2018-6353
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pasted by a physically proximate attacker at an unattended workstation, which makes it easier for attackers to steal Bitcoin via hook code that runs at a later time when the wallet password has been entered, a different vulnerability than CVE-2018-1000022.
CVSS 7.8 · Alta · EPSS 0,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
electrum Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.2.3-1
Actualiza a 3.2.3-1
electrum Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.2.3-1
Actualiza a 3.2.3-1
electrum Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.2.3-1
Actualiza a 3.2.3-1