VDB
CVE-2015-0778
CVE-2015-0778
PUBLISHED
CVSS 7.5 HIGH
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.
EPSS 3.61% · 89.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
3.61%
89.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| suse | opensuse_osc | 0 |
| fedoraproject | fedora | 20, 22, 21 |
| opensuse | opensuse | 13.1, 13.2 |
| n/a | n/a | n/a |
Timeline
- Mar 12, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
References
- https://bugzilla.suse.com/show_bug.cgi?id=901643 url
- FEDORA-2015-4687 vendor-advisory
- openSUSE-SU-2015:0486 vendor-advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154257.html technical
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154267.html technical
- https://security.gentoo.org/glsa/201603-02 technical
- https://nvd.nist.gov/vuln/detail/CVE-2015-0778 advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00012.html url
- http://www.securityfocus.com/bid/73114 url