CVE-2015-1815
NoneCVSS
—
EPSS
16.5%
Published
Mar 30, 2015
CISA due date
—
The record
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | setroubleshoot | 0 | 0:2.0.5-7.el5_11 |
| Red Hat:enterprise_linux:5::client | setroubleshoot-server | 0 | 0:2.0.5-7.el5_11 |
| Red Hat:enterprise_linux:5::server | setroubleshoot | 0 | 0:2.0.5-7.el5_11 |
| Red Hat:enterprise_linux:5::server | setroubleshoot-server | 0 | 0:2.0.5-7.el5_11 |
| Red Hat:enterprise_linux:6::client | setroubleshoot | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::client | setroubleshoot-debuginfo | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::client | setroubleshoot-doc | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::client | setroubleshoot-server | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::server | setroubleshoot | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::server | setroubleshoot-debuginfo | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::server | setroubleshoot-doc | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::server | setroubleshoot-server | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::workstation | setroubleshoot | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::workstation | setroubleshoot-debuginfo | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::workstation | setroubleshoot-doc | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:6::workstation | setroubleshoot-server | 0 | 0:3.0.47-6.el6_6.1 |
| Red Hat:enterprise_linux:7::client | setroubleshoot | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::client | setroubleshoot-debuginfo | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::client | setroubleshoot-server | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::hypervisor | setroubleshoot | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::hypervisor | setroubleshoot-debuginfo | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::hypervisor | setroubleshoot-server | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::server | setroubleshoot | 0 | 0:3.2.17-4.1.ael7b_1 |
| Red Hat:enterprise_linux:7::server | setroubleshoot-debuginfo | 0 | 0:3.2.17-4.1.ael7b_1 |
| Red Hat:enterprise_linux:7::server | setroubleshoot-server | 0 | 0:3.2.17-4.1.ael7b_1 |
| Red Hat:enterprise_linux:7::workstation | setroubleshoot | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::workstation | setroubleshoot-debuginfo | 0 | 0:3.2.17-4.1.el7_1 |
| Red Hat:enterprise_linux:7::workstation | setroubleshoot-server | 0 | 0:3.2.17-4.1.el7_1 |
Related vulnerabilities
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-77
- CVE-2026-112942 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-77
- CVE-2026-55453 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-77
- CVE-2026-102827 simple-git, an interface for running git commands in any node.js application, enables… CWE-77
- CVE-2026-102826 simple-git, an interface for running git commands in any node.js application, enables… CWE-77
- CVE-2026-79945 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-77
- CVE-2026-79741 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-77
- CVE-2026-78493 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-77