CVE-2023-27635

debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file

published March 5, 2023

CVSS
—
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file. (The path is shown to the user before execution.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00442 · 37.4th percentile
Published
2023-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file
    cvelistv5