Vulnerability Details CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.2%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://www.openwall.com/lists/oss-security/2015/08/13/9
- http://www.securityfocus.com/bid/76840
- https://bugzilla.redhat.com/show_bug.cgi?id=1251621
- https://people.redhat.com/sgrubb/audit/ChangeLog
- http://www.openwall.com/lists/oss-security/2015/08/13/9
- http://www.securityfocus.com/bid/76840
- https://bugzilla.redhat.com/show_bug.cgi?id=1251621
- https://people.redhat.com/sgrubb/audit/ChangeLog
Products affected by CVE-2015-5186
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.0
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.1
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.2
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.3
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.4
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.5
-
cpe:2.3:a:linux_audit_project:linux_audit:2.0.6
-
cpe:2.3:a:linux_audit_project:linux_audit:2.1.0
-
cpe:2.3:a:linux_audit_project:linux_audit:2.1.1
-
cpe:2.3:a:linux_audit_project:linux_audit:2.1.2
-
cpe:2.3:a:linux_audit_project:linux_audit:2.1.3
-
cpe:2.3:a:linux_audit_project:linux_audit:2.2.0
-
cpe:2.3:a:linux_audit_project:linux_audit:2.2.1
-
cpe:2.3:a:linux_audit_project:linux_audit:2.2.2
-
cpe:2.3:a:linux_audit_project:linux_audit:2.2.3
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.0
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.1
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.2
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.3
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.4
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.5
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.6
-
cpe:2.3:a:linux_audit_project:linux_audit:2.3.7
-
cpe:2.3:a:linux_audit_project:linux_audit:2.4.0
-
cpe:2.3:a:linux_audit_project:linux_audit:2.4.1
-
cpe:2.3:a:linux_audit_project:linux_audit:2.4.2
-
cpe:2.3:a:linux_audit_project:linux_audit:2.4.3