A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element
    of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing
    within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an
    eval call. (CVE-2019-12761)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element     of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing     within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an     eval call. (CVE-2019-12761)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2997-1 advisory.

    - CVE-2019-12761: Fixed a code injection issue in Category elements of       a Menu XML (bsc#1137627).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2727 advisory.

    It was discovered that there was a code injection issue in PyXDG, a library used to locate freedesktop.org     configuration/cache/etc. directories. CVE-2019-12761 A code injection issue was discovered in PyXDG before     0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS     must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to     a lack of sanitization in xdg/Menu.py before an eval call. For Debian 9 Stretch, these problems have been     fixed in version 0.25-4+deb9u1. We recommend that you upgrade your pyxdg packages. Further information     about Debian LTS security advisories, how to apply these updates to your system and frequently asked     questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4700-1 advisory.

    Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this     with a crafted .menu file to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that there was a code injection issue in PyXDG, a library used to locate 'FreeDesktop.org' configuration/cache/etc.
directories.

A lack of sanitisation allowed arbitrary Python code embedded in the Category element of a Menu XML document in a .menu file to be executed.

For Debian 8 'Jessie', this issue has been fixed in pyxdg version 0.25-4+deb8u1.

We recommend that you upgrade your pyxdg packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
423540	SCA: security update for pyxdg (GHSA-r6v3-hpxj-r8rv)	Tenable Cloud Security	SCA Checks	Local	high
423540	SCA: security update for pyxdg (GHSA-r6v3-hpxj-r8rv)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
222546	Linux Distros Unpatched Vulnerability : CVE-2019-12761	Nessus	Misc.	Local	high
164663	SUSE SLES15 Security Update : python-pyxdg (SUSE-SU-2022:2997-1)	Nessus	SuSE Local Security Checks	Local	high
152194	Debian DLA-2727-1 : pyxdg - LTS security update	Nessus	Debian Local Security Checks	Local	high
145081	Ubuntu 16.04 LTS / 18.04 LTS : PyXDG vulnerability (USN-4700-1)	Nessus	Ubuntu Local Security Checks	Local	high
125927	Debian DLA-1819-1 : pyxdg security update	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2019-12761

high

Tenable Plugins

high

high

high

high

high

high

high