CVE-2014-8165

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-345

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Feb 19, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-81668.8The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackeCVE-2014-81675.9vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attackCVE-2014-81686.1Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.CVE-2014-81694.4automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values inCVE-2014-81708.8ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat EnterpCVE-2014-81715.5The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new prCVE-2014-81724.9The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking apCVE-2014-81737.2The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not pCVE-2014-81749.8eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.CVE-2014-81756.0Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraginCVE-2014-81767.5The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structureCVE-2014-81776.5The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users t
CVE-2014-8165: Critical severity, CVSS 10.0 | Vulnix