CVE-2016-1239
duck: duck before 0.10 did not properly handle loading of untrusted code from the current directory.
CVE-2016-1239 is fixed in duck on 1 platform, first by DEBIAN-CVE-2016-1239, released February 19, 2022. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0121
68th percentile
duck before 0.10 did not properly handle loading of untrusted code from the current directory.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| duck · Debian 12.15 (bookworm) | 0.10 | DEBIAN-CVE-2016-1239 | Feb 19, 2022 |
| duck · Debian 13.5 (trixie) | 0.10 | DEBIAN-CVE-2016-1239 | Feb 19, 2022 |
| duck · Debian 14 | 0.10 | DEBIAN-CVE-2016-1239 | Feb 19, 2022 |