Skip to content

Product

debian/crmsh vulnerabilities

2 published CVES affecting debian/crmsh, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest debian/crmsh CVEs

Newest publication first

  2. CVE-2020-35459 ClusterLabs crmsh vulnerable to shell code injection

    Published
    HighCVSS 7.8 EPSS 0.69%

    An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.