CVE-2014-1928

Опубликовано: 25 окт. 2014

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:python-gnupg_project:python-gnupg:*:*:*:*:*:*:*:*

Версия до 0.3.5 (включая)

EPSS

Процентиль: 47%

0.0061

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-1928

ubuntu

почти 12 лет назад

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

CVE-2014-1928

debian

почти 12 лет назад

The shell_quote function in python-gnupg 0.3.5 does not properly escap ...

GHSA-2jc8-4r6g-282j

CVSS3: 7.5

github

почти 8 лет назад

python-gnupg's shell_quote function does not properly escape characters

EPSS

Процентиль: 47%

0.0061

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-20