CVE-2011-2520: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

Affected products

• Fedoraproject Fedora: version 15 only
• Red Hat System-Config-Firewall: up to and including 1.2.29

Published 2011-07-21. Last modified 2026-06-16.