Skip to content
OpenAdvisories

Product · NTPsec

gpsd

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    gpsd gpsprof Command Injection via gnuplot plot title subtype field

    gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot t…