Lucene search
GitHub Advisory DatabaseGHSA-R3VR-PRWV-86G9HistoryNov 06, 2018 - 11:14 p.m.
High severity vulnerability that affects python-gnupg
2018-11-0623:14:39
CWE-20
GitHub Advisory Database
github.com
13
0.013 Low
EPSS
Percentile
86.0%
The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using “$(” command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
| CPE | Name | Operator | Version |
|---|---|---|---|
| python-gnupg | eq | 0.3.5 |
References
seclists.org/oss-sec/2014/q1/245
seclists.org/oss-sec/2014/q1/294
secunia.com/advisories/56616
secunia.com/advisories/59031
www.debian.org/security/2014/dsa-2946
code.google.com/p/python-gnupg/
code.google.com/p/python-gnupg/issues/detail?id=98
github.com/advisories/GHSA-r3vr-prwv-86g9
nvd.nist.gov/vuln/detail/CVE-2014-1927
Related
osv
osv
PYSEC-2014-90
2014-10-25 21:55:00
Moderate severity vulnerability that affects python-gnupg
2018-11-06 23:13:02
PYSEC-2014-91
2014-10-25 21:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-gnupg-0.3.6-1.fc20
2014-02-22 00:35:25
[SECURITY] Fedora 19 Update: python-gnupg-0.3.6-1.fc19
2014-02-22 00:37:14
cvelist
cvelist
debiancve
debiancve
ubuntucve
ubuntucve
cve
cve
prion
prion
Design/Logic Flaw
2014-10-25 21:55:00
Design/Logic Flaw
2014-10-25 21:55:00
Code injection
2014-06-09 19:55:00
github
github
Moderate severity vulnerability that affects python-gnupg
2018-11-06 23:13:02
High severity vulnerability that affects python-gnupg
2018-11-06 23:14:22
python-gnupg vulnerable to shell injection
2018-11-06 23:12:48
nessus
nessus
Fedora 20 : python-gnupg-0.3.6-1.fc20 (2014-2103)
2014-02-23 00:00:00
Debian DSA-2946-1 : python-gnupg - security update
2014-06-05 00:00:00
Fedora 19 : python-gnupg-0.3.6-1.fc19 (2014-2140)
2014-02-23 00:00:00
debian
debian
[SECURITY] [DSA 2946-1] python-gnupg security update
2014-06-04 16:54:47
openvas
openvas
Fedora Update for python-gnupg FEDORA-2014-2140
2014-02-25 00:00:00
Fedora Update for python-gnupg FEDORA-2014-2140
2014-02-25 00:00:00
Fedora Update for python-gnupg FEDORA-2014-2103
2014-02-25 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2946-1] python-gnupg security update
2014-06-14 00:00:00
python-PGP code execution
2014-06-14 00:00:00
seebug
seebug
Python-gnupg远程命令执行漏洞(CVE-2014-1928)
2014-02-17 00:00:00
Python-gnupg远程命令执行漏洞(CVE-2014-1927)
2014-02-17 00:00:00