Vendors / Bsd Mailx Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Bsd Mailx Project records in CISA KEV No Bsd Mailx Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06858 · Published 2014-12-24 · Partial fix CWE-20
Priority LOW 37
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0155 · Published 2020-01-14 · Partial fix CWE-74
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0