Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-23935

Опубликовано: 25 янв. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.6
CVSS3: 7.8

Описание

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /|$/ check, leading to command injection.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

12.44+dfsg-1
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

12.44+dfsg-1
esm-apps/resolute

not-affected

12.44+dfsg-1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needed

Показывать по

EPSS

Процентиль: 95%
0.07575
Низкий

7.6 High

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

CVSS3: 7.8
debian
почти 5 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ / ...

CVSS3: 9.8
github
почти 5 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check.

CVSS3: 7.8
altlinux
около 4 лет назад

ALT-PU-2022-2517: package `perl-Image-ExifTool` update to version 12.42-alt1

CVSS3: 7.8
altlinux
больше 4 лет назад

ALT-PU-2022-2010: package `perl-Image-ExifTool` update to version 12.42-alt1

EPSS

Процентиль: 95%
0.07575
Низкий

7.6 High

CVSS2

7.8 High

CVSS3