cbcvebase.
CVE-2014-7844
published 2020-01-14

CVE-2014-7844: BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
appleos_x_yosemite_v10.10.5_and_security_update_2015-006
bsdmailx
bsd_mailx_projectbsd_mailx
debianbsd-mailx< bsd-mailx 8.1.2-0.20141216cvs-1 (bookworm)bsd-mailx 8.1.2-0.20141216cvs-1 (bookworm)
debiandebian_linux
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_server
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_tus
redhatenterprise_linux_server_tus
redhatenterprise_linux_server_tus
redhatenterprise_linux_server_tus

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH