CVE-2016-1253

CRÍTICO 9.8CVE-2016-1253 · Published 05/12/2017 · updated 17/06/2026

En resumen

CVE-2016-1253 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a most (debian).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.8%, mayor que el 92.0% de las vulnerabilidades.
Solución: actualizar a 5.0.0a-2.2, 5.0.0a-2.3 o posterior.

Package	Affected versions	Patched versions
most debian	`< 5.0.0a-2.2< 5.0.0a-2.3`	`5.0.0a-2.25.0.0a-2.3`

Description

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file.

References

seclists.org/oss-sec/2016/q4/666 · Issue Tracking
securityfocus.com/bid/94931 · Third Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
lists.debian.org/debian-lts-announce/2016/12/msg00020.html · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free