Logo
›
›vulnerability›CVE-2014-7844
Name
CVE-2014-7844
Source
NVD ( link)Debian ( link)
Description
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
CWEs
CWE-74
Published Date
Updated Date
Workaround
-
Advisories
http://linux.oracle.com/errata/ELSA-2014-1999.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1999.htmlThird Party Advisory
http://seclists.org/oss-sec/2014/q4/1066Mailing List
http://www.debian.org/security/2014/dsa-3104Third Party Advisory
http://www.debian.org/security/2014/dsa-3105Third Party Advisory
http://linux.oracle.com/errata/ELSA-2014-1999.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1999.htmlThird Party Advisory
http://seclists.org/oss-sec/2014/q4/1066Mailing List
http://www.debian.org/security/2014/dsa-3104Third Party Advisory
http://www.debian.org/security/2014/dsa-3105Third Party Advisory

Analysis#

Affected Component
Analysis
heirloom-mailx
Patched

Vulnerability Ratings#

7.8
CVSSv31
7.2
CVSSv2

Others affected component#

Name
Project
Project Version
Version
Status
heirloom-mailx
buildroot
master
12.5
Patched

Resolved with patches#

heirloom-mailx (buildroot:2025.02.x)

#
Title
Author
Resolve
1
outof: Introduce expandaddr flag
Florian Weimer <fweimer@redhat.com>
CVE-2014-7844

heirloom-mailx (buildroot:master)

#
Title
Author
Resolve
1
outof: Introduce expandaddr flag
Florian Weimer <fweimer@redhat.com>
CVE-2014-7844