CVE-2018-13797

Опубликовано: 10 июл. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

Ссылки

https://github.com/scravy/node-macaddress/commit/358fd594adb196a86b94ac9c691f69fe5dad2332
Patch
Third Party Advisory
https://github.com/scravy/node-macaddress/pull/20/
Third Party Advisory
https://github.com/scravy/node-macaddress/releases/tag/0.2.9
Patch
Release Notes
Third Party Advisory
https://news.ycombinator.com/item?id=17283394
Exploit
Third Party Advisory
https://github.com/scravy/node-macaddress/commit/358fd594adb196a86b94ac9c691f69fe5dad2332
Patch
Third Party Advisory
https://github.com/scravy/node-macaddress/pull/20/
Third Party Advisory
https://github.com/scravy/node-macaddress/releases/tag/0.2.9
Patch
Release Notes
Third Party Advisory
https://news.ycombinator.com/item?id=17283394
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:node-macaddress_project:node-macaddress:*:*:*:*:*:node.js:*:*

Версия до 0.2.9 (исключая)

EPSS

Процентиль: 93%

0.11295

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2018-13797

CVSS3: 9.8

ubuntu

больше 7 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

CVE-2018-13797

CVSS3: 9.8

redhat

больше 7 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

CVE-2018-13797

CVSS3: 9.8

debian

больше 7 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrar ...

GHSA-pp57-mqmh-44h7

CVSS3: 9.8

github

больше 7 лет назад

Command Injection in macaddress

EPSS

Процентиль: 93%

0.11295

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78