This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-13797 →
DEBIAN-CVE-2018-13797
The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather t...
Original description
The description as published by the source.
The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
node-macaddress
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-1"}]}]
Debian:13
node-macaddress
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-1"}]}]
Debian:14
node-macaddress
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-1"}]}]
References
- advisory security-tracker.debian.org