Lucene search

RedosROS-20240123-01

HistoryJan 23, 2024 - 12:00 a.m.

ROS-20240123-01

2024-01-2300:00:00

redos.red-soft.ru

atril

document viewer

vulnerability

remote code execution

unix

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

50.3%

JSON

The vulnerability of the Atril multi-page document viewer is related to incorrect neutralization of special elements used in the OS command.
neutralization of special elements used in the OS command. Exploitation of the vulnerability could allow
an attacker acting remotely to execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64atril< 1.26.0-11UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	atril	< 1.26.0-11	UNKNOWN

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

50.3%

JSON

Related for ROS-20240123-01