CVE-2015-5699: High severity nvidia cumulus linux vulnerability
Published Oct 20, 2017
·Updated
The Switch Configuration Tools Backend (clcmdserver) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label.
Affected Software
1 affected component
Cumulusnetworks Cumulus Linux<=2.5.3
Event History
Oct 20, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5699?
CVE-2015-5699 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2015-5699?
To fix CVE-2015-5699, you should upgrade Cumulus Linux to version 2.5.4 or later.
3
Who is affected by CVE-2015-5699?
Local users of Cumulus Linux versions 2.5.3 and earlier are affected by CVE-2015-5699.
4
What kind of vulnerability is CVE-2015-5699?
CVE-2015-5699 is a command injection vulnerability that allows arbitrary command execution.
5
What components of Cumulus Linux are impacted by CVE-2015-5699?
The vulnerability affects the Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux.