| Package | Affected versions | Patched versions |
|---|---|---|
| logsurfer | = 1.1= 1.2= 1.3= 1.4= 1.41= 1.5= 1.5a≤ 1.5b | |
| logsurfer+ | = 1.5a= 1.5b= 1.6= 1.6a= 1.6b≤ 1.7 |
Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted strings in a log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free