CVE-2014-5220

The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers…

published June 8, 2018

CVSS
—
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers to execute arbitrary commands as root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00505 · 42.0th percentile
Published
2018-06-08T17:00Z
EPSS history
Timeline
  • 08 JUN 17:00Z
    The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers…
    cvelistv5