CVE-2014-2886

GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands…

published September 18, 2014

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain situations involving an untrusted substring within this argument, as demonstrated by an untrusted filename encountered during installation of a VirtualBox extension pack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02193 · 82.2th percentile
Published
2014-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands…
    cvelistv5