Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-7440
HistoryFeb 23, 2018 - 9:29 p.m.

Command injection

2018-02-2321:29:00
PRIOn knowledge base
www.prio-n.com
2

7.9 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argument. This issue exists because of an incomplete fix for CVE-2018-3836.

CPENameOperatorVersion
debian_linuxeq7.0
leptonicale1.75.3

7.9 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%