Unrated

An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot root...

CVE-2018-7440 First seen on SecPulse Feb 24, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-7440 leptonlib Fixed in: 1.75.3-3

Original description The description as published by the source.

An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argument. This issue exists because of an incomplete fix for CVE-2018-3836.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory lists.debian.org
advisory security.gentoo.org

Key facts

Severity: Unrated
Published: Feb 24, 2018
First seen on SecPulse: Feb 24, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50