CVE-2021-40084
25.08.2021, 01:15
opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted GECOS field whereas systemd-sysusers (a program with the same specification) does not do that.
| Vendor | Product | Version |
|---|---|---|
| artixlinux | opensysusers | 𝑥 ≤ 0.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases