Known vulnerabilities in pacman
Vendor:
Arch Linux
Software:
pacman
Software CPE:
cpe:2.3:a:arch_linux:pacman:*:*:*:*:*:*:*:*
Website:
https://www.archlinux.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
6.0.0
5.2.2
5.2.1
5.2.0
5.1.3
5.1.2
5.1.1
5.1.0
5.0.2
5.0.1
5.0.0
4.2.1
4.2.0
4.1.2
4.1.1
4.1.0rc1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0rc2
4.0.0rc1
4.0.0
3.5.4
3.5.3
3.5.2
3.5.1
3.5.0
3.4.3
3.4.2
3.4.1
3.4.0
3.3.3
3.3.2
3.3.1
3.3.0
3.2.2
3.2.1
3.2.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0-rc2
3.0.0-rc1
3.0.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU22198 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-18183 |
CWE-78 | Medium | 5.2.0 | 23.10.2019 |
SB2019102312 SB2019102313 SB2019102233 and 3 more |
||
| #VU22197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-18182 |
CWE-78 | Medium | 5.2.0 | 23.10.2019 |
SB2019102312 SB2019102313 SB2019102232 and 3 more |
||
| #VU31147 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-9686 |
CWE-22 | High | 5.1.3 | 11.03.2019 |
SB2019031112 SB2019102234 SB2019031120 |
||
| #VU39766 - Out-of-bounds read CVE-2016-5434 |
CWE-125 | Medium | - | 31.01.2017 |
SB2017013109 |