CVE-2017-1000473

High

Description

Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux-dash
PublishedJan 3, 2018
First seenJan 3, 2018

How to fix

Update
  • linux-dash_project linux-dash2.0 or later

Affected products

ProductAffected versionsFixed in
linux-dash_project linux-dashv < 2.02.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.