base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary     code by leveraging an unsafe call to pickle.load. (CVE-2014-3539)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary
    code by leveraging an unsafe call to pickle.load. (CVE-2014-3539)

python-rope was updated to fix one security issue.

This security issue was fixed :

  - CVE-2014-3539: Disable dynamic object analysis by     default (bnc#916890).

ID	Name	Product	Family	Severity
253820	Linux Distros Unpatched Vulnerability : CVE-2014-3539	Nessus	Misc.	critical
423292	SCA: security update for rope (GHSA-r38r-qp28-2m63)	Tenable Cloud Security	SCA Checks	critical
423292	SCA: security update for rope (GHSA-r38r-qp28-2m63)	Tenable Self-Hosted Container Security	SCA Checks	critical
81621	openSUSE Security Update : python-rope (openSUSE-2015-190)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2014-3539

critical

Tenable Plugins

critical

critical

critical

critical