Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-45145HistoryDec 10, 2022 - 4:15 p.m.
CVE-2022-45145
2022-12-1016:15:09
Alpine Linux Development Team
security.alpinelinux.org
52
chicken 5.x
egg-compile.scm
os command execution
package installation
escape characters
.egg file
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
74.0%
egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
| Alpine | 3.18-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
| Alpine | 3.19-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
| Alpine | 3.20-community | noarch | chicken | < 5.3.0-r3 | UNKNOWN |
Related
veracode
veracode
Denial Of Service (DoS)
2022-11-26 13:43:16
prion
prion
Command injection
2022-12-10 16:15:00
cvelist
cvelist
CVE-2022-45145
2022-12-10 00:00:00
nvd
nvd
CVE-2022-45145
2022-12-10 16:15:09
debiancve
debiancve
CVE-2022-45145
2022-12-10 16:15:09
ubuntucve
ubuntucve
CVE-2022-45145
2022-12-10 00:00:00
cve
cve
CVE-2022-45145
2022-12-10 16:15:09
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
74.0%
Related for ALPINE:CVE-2022-45145