Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-13797

Опубликовано: 10 июл. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

РелизСтатусПримечание
artful

DNE

bionic

ignored

end of standard support, was needed
cosmic

not-affected

0.2.9-1
devel

not-affected

0.2.9-1
disco

not-affected

0.2.9-1
eoan

not-affected

0.2.9-1
esm-apps/bionic

needed

esm-apps/focal

not-affected

0.2.9-1
esm-apps/jammy

not-affected

0.2.9-1
esm-apps/noble

not-affected

0.2.9-1

Показывать по

EPSS

Процентиль: 93%
0.06664
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
около 8 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

CVSS3: 9.8
nvd
около 8 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

CVSS3: 9.8
debian
около 8 лет назад

The macaddress module before 0.2.9 for Node.js is prone to an arbitrar ...

CVSS3: 9.8
github
почти 8 лет назад

Command Injection in macaddress

EPSS

Процентиль: 93%
0.06664
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3