VDB
BDU%3A2017-01834
BDU%3A2017-01834
PUBLISHED
CVSS 7.5 HIGH
Уязвимость пакета texlive-base дистрибутива системы компьютерной вёрстки TeX Live, позволяющая нарушителю выполнить произвольные команды
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, TeX Users Group | Debian GNU/Linux, Fedora, TeX Live |
Timeline
- Aug 18, 2017 CVE Published
- Mar 23, 2021 CVE Updated
- Mar 18, 2026 Distribution Patch
References
- http://www.debian.org/security/2017/dsa-3803 url
- http://www.openwall.com/lists/oss-security/2017/03/05/1 url
- https://www.tug.org/svn/texlive?view=revision&revision=42605 url
- http://www.securityfocus.com/bid/96593 url
- https://scumjr.github.io/2016/11/28/pwning-coworkers-thanks-to-latex/ url
- https://lists.fedoraproject.org/archives/list/package-announce advisory