IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ipython | Aug 22, 2024 | Jan 19, 2022 |
| Debian | — | Upgrade ipython | Jan 26, 2022 | Jan 19, 2022 |
| Freebsd | — | Upgrade py311-ipythonUpgrade py310-ipythonUpgrade py38-ipythonUpgrade py39-ipythonUpgrade py37-ipython | Nov 13, 2022 | Nov 12, 2022 |
| Suse | — | Upgrade python3-ipythonUpgrade python3-ipython-iptest | Oct 26, 2022 | Jan 19, 2022 |
| Ubuntu | — | Upgrade python3-ipython (Ubuntu Pro)Upgrade python-ipython (Ubuntu Pro)Upgrade ipython3 (Ubuntu Pro)Upgrade ipython-notebook-common (Ubuntu Pro)Upgrade ipython-notebook (Ubuntu Pro)Upgrade ipython (Ubuntu Pro)Upgrade ipython3-notebook (Ubuntu Pro) | Mar 22, 2023 | Jan 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub