{"id":"CVE-2013-7323","published":"2014-06-09T19:00:00Z","modified":"2024-08-06T18:01:20Z","title":"python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in…","vendor":null,"product":null,"tier":"tail","description":{"text":"python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02876,"percentile":0.86779,"provenance":"source"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/56616","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.debian.org/security/2014/dsa-2946","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://code.google.com/p/python-gnupg/","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/oss-sec/2014/q1/244","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://seclists.org/oss-sec/2014/q1/294","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://seclists.org/oss-sec/2014/q1/243","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://secunia.com/advisories/59031","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"priority":{"score":17.4,"factors":[{"name":"EPSS percentile","points":17.36}]},"affected":[{"ecosystem":"PyPI","package":"python-gnupg","vulnerableRanges":["<0.3.7","<0.3.5"],"patched":["0.3.7","0.3.5"],"from":["GHSA-c2fx-8r76-gh36","PYSEC-2014-89"],"provenance":"source"}],"euvd":{"id":"EUVD-2014-0087","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-python-gnupg-cve-2013-7323","children":[{"from":"CVE-2013-7323","to":"CVE-2014-1927","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","from":"CVE.org","in":"CVE-2014-1927"},{"kind":"version-step","provenance":"source","package":"PyPI:python-gnupg","fromFixed":"0.3.5","toFixed":"0.3.6","daysApart":138}]},{"from":"CVE-2013-7323","to":"CVE-2014-1928","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","from":"CVE.org","in":"CVE-2014-1928"},{"kind":"version-step","provenance":"source","package":"PyPI:python-gnupg","fromFixed":"0.3.5","toFixed":"0.3.6","daysApart":138}]},{"from":"CVE-2013-7323","to":"CVE-2014-1929","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.","from":"CVE.org","in":"CVE-2014-1929"}]}],"packageHistory":[{"cve":"CVE-2014-1927","published":"2014-10-25","fixed":"0.3.6","kev":false},{"cve":"CVE-2014-1928","published":"2014-10-25","fixed":"0.3.6","kev":false},{"cve":"CVE-2013-7323","published":"2014-06-09","fixed":"0.3.7","kev":false},{"cve":"CVE-2014-1929","published":"2014-10-25","fixed":"0.3.7","kev":false},{"cve":"CVE-2019-6690","published":"2019-03-17","fixed":"0.4.4","kev":false}],"package":"PyPI:python-gnupg"}}