Логотип exploitDog
bind:"BDU:2023-03875" OR bind:"CVE-2023-32700"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2023-03875" OR bind:"CVE-2023-32700"

Количество 12

Количество 12

fstec логотип

BDU:2023-03875

больше 8 лет назад

Уязвимость функции io.popen() компонента luatex-core.lua систем компьютерной верстки LuaTeX, TeX Live и MiKTeX, позволяющая нарушителю выполнить произвольные команды

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2023-32700

около 2 лет назад

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2023-32700

около 2 лет назад

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2023-32700

около 2 лет назад

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2023-32700

около 2 лет назад

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when ...

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:2285-1

около 2 лет назад

Security update for texlive

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:2284-2

около 2 лет назад

Security update for texlive

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:2284-1

около 2 лет назад

Security update for texlive

EPSS: Низкий
rocky логотип

RLSA-2023:3661

около 2 лет назад

Important: texlive security update

EPSS: Низкий
github логотип

GHSA-7xcp-5fvh-7fwm

около 2 лет назад

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2023-3661

около 2 лет назад

ELSA-2023-3661: texlive security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:2287-1

около 2 лет назад

Security update for cups-filters, poppler, texlive

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2023-03875

Уязвимость функции io.popen() компонента luatex-core.lua систем компьютерной верстки LuaTeX, TeX Live и MiKTeX, позволяющая нарушителю выполнить произвольные команды

CVSS3: 7.8
0%
Низкий
больше 8 лет назад
ubuntu логотип
CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-32700

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when ...

CVSS3: 7.8
0%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:2285-1

Security update for texlive

0%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:2284-2

Security update for texlive

0%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:2284-1

Security update for texlive

0%
Низкий
около 2 лет назад
rocky логотип
RLSA-2023:3661

Important: texlive security update

0%
Низкий
около 2 лет назад
github логотип
GHSA-7xcp-5fvh-7fwm

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

CVSS3: 7.8
0%
Низкий
около 2 лет назад
oracle-oval логотип
ELSA-2023-3661

ELSA-2023-3661: texlive security update (IMPORTANT)

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:2287-1

Security update for cups-filters, poppler, texlive

около 2 лет назад

Уязвимостей на страницу