gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution

A flaw was found in gpsd, a service application that monitors one or more GPSes or AIS receivers. The gpsprof utility is vulnerable to a command injection. An attacker who can control the GPS device subtype value can embed malicious commands within the gnuplot plot title. When a user processes a...

PT-2018-2826

Name of the Vulnerable Software and Affected Versions GNU plotutils affected versions not specified Description The issue is related to errors in data initialization in the plot tool of the GNU plotutils package for graphical display of scientific data. Exploitation of this issue may allow an...