CVE-2014-7844

Опубликовано: 14 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

Ссылки

http://linux.oracle.com/errata/ELSA-2014-1999.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1999.html
Third Party Advisory
http://seclists.org/oss-sec/2014/q4/1066
Mailing List
Patch
Third Party Advisory
http://www.debian.org/security/2014/dsa-3104
Third Party Advisory
http://www.debian.org/security/2014/dsa-3105
Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-1999.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1999.html
Third Party Advisory
http://seclists.org/oss-sec/2014/q4/1066
Mailing List
Patch
Third Party Advisory
http://www.debian.org/security/2014/dsa-3104
Third Party Advisory
http://www.debian.org/security/2014/dsa-3105
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:bsd_mailx_project:bsd_mailx:8.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.0091

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2014-7844

CVSS3: 7.8

ubuntu

больше 5 лет назад

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

CVE-2014-7844

redhat

больше 10 лет назад

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

CVE-2014-7844

CVSS3: 7.8

debian

больше 5 лет назад

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitra ...

GHSA-v8v3-2m82-gr7p

CVSS3: 7.8

github

около 3 лет назад

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

SUSE-RU-2015:0876-1

suse-cvrf

больше 11 лет назад

Recommended update for mailx

EPSS

Процентиль: 75%

0.0091

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-74