CVE-2014-7817

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary…

published November 24, 2014

CVSS
—
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00578 · 46.8th percentile
Published
2014-11-24T15:00Z
EPSS history
Timeline
  • 24 NOV 15:00Z
    The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary…
    cvelistv5