OS Command Injection in Fedora - CVE-2017-5330

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU39365

OS Command Injection in Fedora - CVE-2017-5330

Published: March 27, 2017 / Updated: August 8, 2020


Vulnerability identifier: #VU39365
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2017-5330
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Fedoraproject
Affected software:
Fedora

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.


How to mitigate CVE-2017-5330

Install update from vendor's website.

Sources