CVE-2017-16926

published 2017-11-22

CVE-2017-16926: Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing…

Priority P2 63 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	ohcount	< ohcount 3.1.0-1 (bookworm)	ohcount 3.1.0-1 (bookworm)
ohcount_project	ohcount	—	—
ohcount_project	ohcount	>= 0 < 3.1.0-1	3.1.0-1
ohcount_project	ohcount	>= 0 < 3.1.0-1	3.1.0-1
ohcount_project	ohcount	>= 0 < 3.1.0-1	3.1.0-1

Detection & IOCs extracted from sources · hover to see the quote

• → Command injection occurs via specially crafted filenames containing shell metacharacters when Ohcount processes a source tree — monitor for unexpected process spawning or shell metacharacter sequences in filenames passed to Ohcount. ↗

• · Vulnerability is limited to Ohcount version 3.0.0; versions 3.1.0-1 and later (as packaged in Debian bookworm, bullseye, sid, trixie) are resolved. ↗
• · Attack scope is local — the attacker must be able to supply a specially crafted source tree for Ohcount to process. ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 9.8 CRITICAL

vendor_debian 9.8 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78