Lucene search

CVE-2014-1927

🗓️ 25 Oct 2014 21:03:55Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 21 Views

The python-gnupg 0.3.5 shell_quote function allows arbitrary code execution via shell metacharacter

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 51
CVE	CVE-2014-1927	25 Oct 201421:55	–	cve
CVE	CVE-2014-1928	25 Oct 201421:55	–	cve
CVE	CVE-2013-7323	9 Jun 201419:55	–	cve
CVE	CVE-2014-1929	25 Oct 201421:55	–	cve
Github Security Blog	python-gnupg's shell_quote function does not properly quote strings	6 Nov 201823:14	–	github
Github Security Blog	python-gnupg's shell_quote function does not properly escape characters	6 Nov 201823:13	–	github
Github Security Blog	python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters	6 Nov 201823:14	–	github
Github Security Blog	python-gnupg vulnerable to shell injection	6 Nov 201823:12	–	github
Prion	Design/Logic Flaw	25 Oct 201421:55	–	prion
Prion	Design/Logic Flaw	25 Oct 201421:55	–	prion

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	12	all	python-gnupg	0.3.6-1	python-gnupg_0.3.6-1_all.deb
Debian	11	all	python-gnupg	0.3.6-1	python-gnupg_0.3.6-1_all.deb
Debian	999	all	python-gnupg	0.3.6-1	python-gnupg_0.3.6-1_all.deb
Debian	13	all	python-gnupg	0.3.6-1	python-gnupg_0.3.6-1_all.deb

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Oct 2014 21:55Current

7.3High risk

Vulners AI Score7.3

CVSS27.5

EPSS0.01162

python-gnupg vulnerability shell_quote function arbitrary code execution shell metacharacters cve-2014-1927 incomplete fixunix