IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 06:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668 - Patch, Third Party Advisory | |
| References | () https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x - Exploit, Third Party Advisory | |
| References | () https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699 - Release Notes, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2022/01/msg00021.html - Mailing List, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZ7LVZBB4D7KVSFNEQUBEHFO3JW6D2ZK/ - | |
| CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 8.2 |
25 Mar 2022, 15:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZ7LVZBB4D7KVSFNEQUBEHFO3JW6D2ZK/ - Mailing List, Third Party Advisory | |
| References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/ - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
12 Feb 2022, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-279 CWE-250 |
|
| References |
|
26 Jan 2022, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 8.8 |
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:a:ipython:ipython:*:*:*:*:*:*:*:* |
|
| CWE | CWE-269 | |
| References | (MISC) https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699 - Release Notes, Third Party Advisory | |
| References | (CONFIRM) https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668 - Patch, Third Party Advisory | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00021.html - Mailing List, Third Party Advisory |
24 Jan 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Jan 2022, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-19 22:15
Updated : 2024-11-21 06:45
NVD link : CVE-2022-21699
Mitre link : CVE-2022-21699
CVE.ORG link : CVE-2022-21699
JSON object : View
Products Affected
fedoraproject
- fedora
ipython
- ipython
debian
- debian_linux