Lucene search
Veracode Vulnerability DatabaseVERACODE:32199HistorySep 21, 2021 - 11:47 p.m.
Remote Code Execution (RCE)
2021-09-2123:47:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
opensysusers
remote code execution
denial of service
gecos field
systemd-sysusers
EPSS
0.005
Percentile
75.8%
opensysusers is vulnerable to denial of service. It does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted GECOS field whereas systemd-sysusers (a program with the same specification) does not do that.
Related
osv
osv
CVE-2021-40084
2021-08-25 01:15:12
cvelist
cvelist
CVE-2021-40084
2021-08-25 00:21:25
nvd
nvd
CVE-2021-40084
2021-08-25 01:15:12
prion
prion
Command injection
2021-08-25 01:15:00
debiancve
debiancve
CVE-2021-40084
2021-08-25 01:15:12
ubuntucve
ubuntucve
CVE-2021-40084
2021-08-25 00:00:00
cve
cve
CVE-2021-40084
2021-08-25 01:15:12