CVE-2020-15591

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-15591

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15591.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-15591

Related

UBUNTU-CVE-2020-15591

Published

2022-03-17T16:15:07Z

Modified

2025-01-08T07:11:13.780793Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote code execution).

References

Affected packages

Debian:11 / fex

Package

Name: fex
Purl: pkg:deb/debian/fex?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20160919-2

Affected versions

Other

20110601-1

20110608-1

20110608-2

20110610-1

20110610-2

20110620-1

20110622-1

20110726-1~bpo60+1

20110726-1

20111129-1

20111129-2

20120215-1

20120215-2

20120215-3~bpo60+1

20120215-3

20120718-1

20120718-2

20120718-3

20120718-4

20120718-5

20120930-1

20121027-1

20121107-1~bpo60+1

20121107-1

20130217-1

20130510-1

20130805-1

20140226-1

20140313-1

20140530-1

20140806-1

20140818-1

20140902-1~bpo70+1

20140902-1

20140902-2

20140917-1~bpo70+1

20140917-1

20140917-2

20150120-1

20150120-2

20150729-1

20150826-1

20160104-1

20160328-1

20160919-1

20160919-2~deb9u1

20160919-2~deb10u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / fex

Package

Name: fex
Purl: pkg:deb/debian/fex?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20160919-2

Affected versions

Other

20110601-1

20110608-1

20110608-2

20110610-1

20110610-2

20110620-1

20110622-1

20110726-1~bpo60+1

20110726-1

20111129-1

20111129-2

20120215-1

20120215-2

20120215-3~bpo60+1

20120215-3

20120718-1

20120718-2

20120718-3

20120718-4

20120718-5

20120930-1

20121027-1

20121107-1~bpo60+1

20121107-1

20130217-1

20130510-1

20130805-1

20140226-1

20140313-1

20140530-1

20140806-1

20140818-1

20140902-1~bpo70+1

20140902-1

20140902-2

20140917-1~bpo70+1

20140917-1

20140917-2

20150120-1

20150120-2

20150729-1

20150826-1

20160104-1

20160328-1

20160919-1

20160919-2~deb9u1

20160919-2~deb10u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / fex

Package

Name: fex
Purl: pkg:deb/debian/fex?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20160919-2

Affected versions

Other

20110601-1

20110608-1

20110608-2

20110610-1

20110610-2

20110620-1

20110622-1

20110726-1~bpo60+1

20110726-1

20111129-1

20111129-2

20120215-1

20120215-2

20120215-3~bpo60+1

20120215-3

20120718-1

20120718-2

20120718-3

20120718-4

20120718-5

20120930-1

20121027-1

20121107-1~bpo60+1

20121107-1

20130217-1

20130510-1

20130805-1

20140226-1

20140313-1

20140530-1

20140806-1

20140818-1

20140902-1~bpo70+1

20140902-1

20140902-2

20140917-1~bpo70+1

20140917-1

20140917-2

20150120-1

20150120-2

20150729-1

20150826-1

20160104-1

20160328-1

20160919-1

20160919-2~deb9u1

20160919-2~deb10u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}