Debian/picocom: critical 9.8
picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.
Action: Upgrade picocom to 1.7-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7-2 | - |
Fixed versions
| 1.7-2 |
Sources
- osv: DEBIAN-CVE-2015-9059#Debian:14/picocom
- https://security-tracker.debian.org/tracker/CVE-2015-9059
published · modified · JSON