Lucene search

K
osvGoogleOSV:CVE-2021-40084
HistoryAug 25, 2021 - 1:15 a.m.

CVE-2021-40084

2021-08-2501:15:12
Google
osv.dev
3
opensysusers
cve-2021-40084
command execution

AI Score

7

Confidence

High

EPSS

0.005

Percentile

75.8%

opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted GECOS field whereas systemd-sysusers (a program with the same specification) does not do that.

AI Score

7

Confidence

High

EPSS

0.005

Percentile

75.8%