CVE-2015-8971: Command Injection
Published Jan 23, 2017
·Updated
Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063.
Affected Software
2 affected components
Debian Debian Linux=8.0
Enlightenment Terminology=0.7.0
Remediation
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2015-8971?
CVE-2015-8971 has been rated as having a medium severity due to its potential for remote command execution.
2
How do I fix CVE-2015-8971?
To fix CVE-2015-8971, upgrade to a patched version of Terminology or apply vendor recommendations for secure configurations.
3
What systems are affected by CVE-2015-8971?
CVE-2015-8971 affects Terminology version 0.7.0 as well as Debian GNU/Linux 8.0.
4
What type of vulnerability is CVE-2015-8971?
CVE-2015-8971 is a command injection vulnerability that allows attackers to execute arbitrary commands.
5
Is there any workaround for CVE-2015-8971?
Disabling the functionality that allows escape sequences in the terminal can serve as a temporary workaround for CVE-2015-8971.