CVE-2023-27635

debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file. (The path is shown to the user before execution.)

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-03-05

Last modified

2025-03-06

Weaknesses

CWE-74

Affected products

• Debmany (Debian)

References

• https://bugs.debian.org/1031267