Summary
It was discovered that Newsbeuter didn't handle the command line input
properly. An remote attacker could use it to ran remote code by crafting
a special input file. (CVE-2017-12904)
It was discovered that Newsbeuter didn't handle metacharacters in its
filename properly. An remote attacker could use it to ran remote code by
crafting a special filename. (CVE-2017-14500)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | newsbeuter | 2.9-3ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 th…
-
Unscored —
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in News…