Lucene search
Ubuntu.comUB:CVE-2014-9622HistoryJan 21, 2015 - 12:00 a.m.
CVE-2014-9622
2015-01-2100:00:00
ubuntu.com
ubuntu.com
8
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.7%
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported
desktop environment is identified, allows context-dependent attackers to
execute arbitrary code via the URL argument to xdg-open.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773085>
- <https://bugs.freedesktop.org/show_bug.cgi?id=66670>
Notes
| Author | Note |
|---|---|
| mdeslaur | beware, original patch causes regression seems to be introduced by: http://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=a616912e48b7ff1d908852739d16525df79471b9 which is after the xdg-utils versions in Ubuntu |
Related
securityvulns
securityvulns
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 00:00:00
xdg-open code execution
2015-03-08 00:00:00
mageia
mageia
Updated xdg-utils packages fix CVE-2014-9622
2015-02-11 23:47:51
osv
osv
xdg-utils - security update
2015-01-18 00:00:00
xdg-utils - security update
2015-05-01 00:00:00
nessus
nessus
Debian DSA-3131-1 : xdg-utils - security update
2015-01-20 00:00:00
openSUSE Security Update : xdg-utils (openSUSE-SU-2015:0191-1)
2015-02-03 00:00:00
GLSA-201701-09 : Xdg-Utils: Command injection
2017-01-03 00:00:00
prion
prion
Design/Logic Flaw
2015-01-21 18:59:00
cve
cve
CVE-2014-9622
2015-01-21 18:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0271-1)
2021-04-19 00:00:00
Debian Security Advisory DSA 3131-1 (xdg-utils - security update)
2015-01-18 00:00:00
Debian: Security Advisory (DSA-3131-1)
2015-01-17 00:00:00
debiancve
debiancve
CVE-2014-9622
2015-01-21 18:59:00
gentoo
gentoo
Xdg-Utils: Command injection
2017-01-01 00:00:00
debian
debian
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 04:22:31
[SECURITY] [DSA 3131-1] xdg-utils security update
2015-01-19 04:22:31
[SECURITY] [DLA 217-1] xdg-utils security update
2015-05-01 09:32:20
rosalinux
rosalinux
Advisory ROSA-SA-2021-2001
2021-07-02 18:21:18
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.7%
Related for UB:CVE-2014-9622