Lucene search
PRIOn knowledge basePRION:CVE-2018-3836HistoryApr 24, 2018 - 7:29 p.m.
Command injection
2018-04-2419:29:00
PRIOn knowledge base
www.prio-n.com
3
An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 7.0 | |
| leptonica | eq | 1.74.4 |
Related
talos
talos
Leptonica gplotMakeOutput Command Injection Vulnerability
2018-01-22 00:00:00
redhatcve
redhatcve
CVE-2018-3836
2019-05-14 12:08:01
CVE-2018-7440
2019-05-14 12:27:10
osv
osv
leptonlib - security update
2018-02-15 00:00:00
CVE-2018-3836
2018-04-24 19:29:03
CVE-2018-7440
2018-02-23 21:29:00
nvd
nvd
CVE-2018-3836
2018-04-24 19:29:03
CVE-2018-7440
2018-02-23 21:29:00
debiancve
debiancve
CVE-2018-3836
2018-04-24 19:29:03
CVE-2018-7440
2018-02-23 21:29:00
suse
suse
Security update for leptonica (important)
2018-02-12 21:08:28
nessus
nessus
Debian DLA-1284-1 : leptonlib security update
2018-02-16 00:00:00
openSUSE Security Update : leptonica (openSUSE-2018-158)
2018-02-13 00:00:00
Ubuntu 16.04 ESM : Leptonica vulnerabilities (USN-4819-1)
2023-10-20 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1284-1)
2018-02-20 00:00:00
openSUSE: Security Advisory for leptonica (openSUSE-SU-2018:0429-1)
2018-02-14 00:00:00
Mageia: Security Advisory (MGASA-2018-0154)
2022-01-28 00:00:00
cve
cve
CVE-2018-3836
2018-04-24 19:29:03
CVE-2018-7440
2018-02-23 21:29:00
mageia
mageia
Updated leptonica packages fix a security vulnerability
2018-03-02 00:27:52
Updated leptonica packages fix security vulnerabilities
2018-06-14 21:14:36
debian
debian
[SECURITY] [DLA 1284-1] leptonlib security update
2018-02-15 09:38:37
[SECURITY] [DLA 1302-1] leptonlib security update
2018-03-07 06:58:02
cvelist
cvelist
CVE-2018-3836
2018-01-22 00:00:00
CVE-2018-7440
2018-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2018-3836
2018-04-24 00:00:00
CVE-2018-7440
2018-02-23 00:00:00
prion
prion
Command injection
2018-02-23 21:29:00
ubuntu
ubuntu
Leptonica vulnerabilities
2021-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: leptonica-1.76.0-1.fc28
2018-05-16 13:07:57
[SECURITY] Fedora 27 Update: mingw-leptonica-1.74.4-4.fc27
2018-03-13 23:23:29
[SECURITY] Fedora 26 Update: leptonica-1.74.4-5.fc26
2018-03-13 17:20:18