CVE-2014-7817

Published: Nov 24, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

Affected (8)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Gnu: Glibc · +1 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Gnu: Glibc · Opensuse: Opensuse

1 product

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	Version 2.21

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://linux.oracle.com/errata/ELSA-2015-0016.html

Source: secalert@redhat.com

http://linux.oracle.com/errata/ELSA-2015-0092.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2014-2023.html

Source: secalert@redhat.com

Vendor Advisory

http://seclists.org/oss-sec/2014/q4/730

Source: secalert@redhat.com

http://secunia.com/advisories/62100

Source: secalert@redhat.com

http://secunia.com/advisories/62146

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3142

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/71216

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2432-1

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/98852

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201602-02

Source: secalert@redhat.com

https://sourceware.org/bugzilla/show_bug.cgi?id=17625

Source: secalert@redhat.com

https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=a39208bd7fb76c1b01c127b4c61f9bfd915bfe7c

Source: secalert@redhat.com

https://sourceware.org/ml/libc-alpha/2014-11/msg00519.html

Source: secalert@redhat.com

Vendor Advisory

http://linux.oracle.com/errata/ELSA-2015-0016.html