python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp
Priority MEDIUM 42CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and GitHub.
Summary
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
Why it matters now
EPSS 0.01824 78th percentileScored 2026-11-07
Fix Fixed python-dbusmock (Ubuntu): 0.15.1python-dbusmock (PyPI): 0.15.1
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Ubuntu | python-dbusmock | before 0.15.1 | 0.15.1 | Patch available | CNA |
| — | python-dbusmock (PyPI) | before 0.15.1 | 0.15.1 | Patch available | GHSA-74xw-82v7-hmrm |
- python-dbusmock VendorUbuntu Affected before 0.15.1 Fixed in 0.15.1 Patch available CNA
- python-dbusmock (PyPI) Vendor— Affected before 0.15.1 Fixed in 0.15.1 Patch available GHSA-74xw-82v7-hmrm
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:python-dbusmock_project:python-dbusmock:*:*:*:*:*:*:*:* | before 0.15.1 | Vulnerable | Python-dbusmock Project |
- cpe:2.3:a:python-dbusmock_project:python-dbusmock:*:*:*:*:*:*:*:* Versions before 0.15.1 Vulnerable ·Python-dbusmock Project
Remediation
- Fix · CNA python-dbusmock (Ubuntu) Fixed in 0.15.1
- Fix · GHSA-74xw-82v7-hmrm python-dbusmock (PyPI) Fixed in 0.15.1 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2015-1326
- 2026-10-03 Alias added: GHSA-74xw-82v7-hmrm
References
More Ubuntu vulnerabilities
- TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
- TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
- TI-2004-01032 Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and… CVSS 2.0HIGH 10.0
- TI-2004-00896 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other… CVSS 2.0HIGH 10.0
- TI-2004-00800 Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may… CVSS 2.0HIGH 10.0
- TI-2004-00962 Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to… CVSS 2.0HIGH 10.0
Sources
- CVE-2015-1326 · CVE Program
- CVE-2015-1326 · NVD
- FIRST EPSS
- GHSA-74xw-82v7-hmrm · GitHub Advisory Database · CC BY 4.0
- CVE-2015-1326 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences