PT-2018-5239
CVE-2017-1000473
·
Published
2018-01-03
·
Updated
2018-01-19
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux Dash versions up to v2
Description
The issue is related to command injection vulnerabilities in the way module names are parsed and then executed, resulting in code execution on the server, potentially as root.
Recommendations
For Linux Dash versions up to v2, update to a version later than v2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾