Newsbeuter vulnerabilities

2020-10-15T00:00:00
ID USN-4585-1
Type ubuntu
Reporter Ubuntu
Modified 2020-10-15T00:00:00

Description

It was discovered that Newsbeuter didn't handle the command line input
properly. An remote attacker could use it to ran remote code by crafting
a special input file. (CVE-2017-12904)

It was discovered that Newsbeuter didn't handle metacharacters in its
filename properly. An remote attacker could use it to ran remote code by
crafting a special filename. (CVE-2017-14500)