GCVE-VVD-MAGEIA-2017-263 — Vulnetix

Try Vulnetix Request Demo

GCVE-VVD-MAGEIA-2017-263

Advisory Published

Vulnetix · Advisory published August 13, 2017

A vulnerability has been found where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Depending on how supervisord has been configured, this may be root (CVE-2017-11610).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	supervisor	0 (affected), 3.0.1-1.mga5 (unaffected)	—
Mageia	supervisor	0 (affected), 3.1.4-1.mga6 (unaffected)	—

Aliases

Transitive aliases

GSD-2017-11610 RHSA-2017:3005 GHSA-x7c8-4x3h-874w CVE-2017-12148 EUVD-2017-3732 GHSA-fxg8-q29x-8w2q CNVD-2017-36015 BDU:2017-02043 EUVD-2017-0132 PYSEC-2017-41 VVD-GENTOO-2017-628724 CNVD-2017-26163 GSD-2017-12148

References

Updated supervisor packages fix security vulnerability

advisory

Updated supervisor packages fix security vulnerability

issue

Updated supervisor packages fix security vulnerability

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON