Lucene search

K
redhatcveRedhat.comRH:CVE-2018-3836
HistoryMay 14, 2019 - 12:08 p.m.

CVE-2018-3836

2019-05-1412:08:01
redhat.com
access.redhat.com
4

0.0005 Low

EPSS

Percentile

18.1%

An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary code execution. An attacker can provide a malicious path as input to an application that passes attacker data to this function to trigger this vulnerability.