What’s Vulnerable › Vulnerabilities

CVE-2019-17080

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-02 · updated 2026-06-17
• Weakness: CWE-502

Description

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

Affected products

• LinuxMint Mintinstall: 7.9.9

References

• http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
• https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
• https://github.com/Andhrimnirr/Mintinstall-object-injection
• https://github.com/linuxmint/mintinstall/blob/master/debian/changelog
• http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html
• https://forums.linuxmint.com/viewtopic.php?f=143&t=302960
• https://github.com/Andhrimnirr/Mintinstall-object-injection
• https://github.com/linuxmint/mintinstall/blob/master/debian/changelog

Get alerted when CVE-2019-17080 or the next vulnerability affects your stack