{"schemaVersion":3,"id":"CVE-2017-14867","aliases":["MGASA-2017-0404","SUSE-SU-2017:2717-1","SUSE-SU-2017:2747-1","UBUNTU-CVE-2017-14867","USN-3438-1","DEBIAN-CVE-2017-14867","DLA-1120-1","DSA-3984-1"],"status":"published","duplicateOf":null,"title":null,"description":"Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.","dates":{"published":"2017-09-28T14:00:00.000Z","modified":"2024-08-05T19:42:21.436Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9,"severity":"high","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":0.36003,"percentile":0.98463,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.36003},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.34069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.36003,"percentile":0.98463}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.34069,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.36003,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.36003,"percentile":0.98463}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"debian","product":"git","name":"git","label":"git","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/git","purlType":"deb","versions":[{"text":"< 1:2.14.2-1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.1.4-2.1+deb8u5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.11.0-3+deb9u2","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.10.4-1+wheezy6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.14.2-1 | < 1:2.1.4-2.1+deb8u5 | < 1:2.11.0-3+deb9u2 | < 1:1.7.10.4-1+wheezy6","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"git","name":"git","label":"git","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/git","purlType":"deb","versions":[{"text":"< 1:1.9.1-1ubuntu0.7","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.7.4-0ubuntu1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.9.1-1ubuntu0.7 | < 1:2.7.4-0ubuntu1.3","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0 | 9.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"git-scm","product":"git","name":"git","label":"git","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.10.4","noFixRecorded":false,"fixedIn":null},{"text":"2.11.0","noFixRecorded":false,"fixedIn":null},{"text":"2.11.1","noFixRecorded":false,"fixedIn":null},{"text":"2.11.2","noFixRecorded":false,"fixedIn":null},{"text":"2.11.3","noFixRecorded":false,"fixedIn":null},{"text":"2.12.0","noFixRecorded":false,"fixedIn":null},{"text":"2.12.1","noFixRecorded":false,"fixedIn":null},{"text":"2.12.2","noFixRecorded":false,"fixedIn":null},{"text":"2.12.3","noFixRecorded":false,"fixedIn":null},{"text":"2.12.4","noFixRecorded":false,"fixedIn":null},{"text":"2.13.0","noFixRecorded":false,"fixedIn":null},{"text":"2.13.1","noFixRecorded":false,"fixedIn":null},{"text":"2.13.2","noFixRecorded":false,"fixedIn":null},{"text":"2.13.3","noFixRecorded":false,"fixedIn":null},{"text":"2.13.4","noFixRecorded":false,"fixedIn":null},{"text":"2.13.5","noFixRecorded":false,"fixedIn":null},{"text":"2.14.0","noFixRecorded":false,"fixedIn":null},{"text":"2.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.10.4 | 2.11.0 | 2.11.1 | 2.11.2 | 2.11.3 | 2.12.0 | 2.12.1 | 2.12.2 | 2.12.3 | 2.12.4 | 2.13.0 | 2.13.1 | 2.13.2 | 2.13.3 | 2.13.4 | 2.13.5 | 2.14.0 | 2.14.1","eol":null,"hubHref":"/vendor/git-scm/git"},{"vendor":"mageia","product":"git","name":"git","label":"git","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/git","purlType":"rpm","versions":[{"text":"< 2.13.6-1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.13.6-1.mga6","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"git","label":"git&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server 12 SP3","name":"git","label":"git&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"git","label":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"git","label":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 1.7.12.4-0.18.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.12.4-0.18.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE OpenStack Cloud 6","name":"git","label":"git&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 2.12.3-27.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-27.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Studio Onsite 1.3","name":"git","label":"git&distro=SUSE Studio Onsite 1.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Studio Onsite 1.3","purlType":"rpm","versions":[{"text":"< 1.7.12.4-0.18.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.12.4-0.18.6.1","eol":null,"hubHref":null}],"affectedCount":17,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.openwall.com/lists/oss-security/2017/09/26/9","label":"www.openwall.com/lists/oss-security/2017/09/26/9","hostname":"www.openwall.com","tags":["X Refsource CONFIRM","Mailing List","Third Party Advisory","REPORT"]},{"url":"https://bugs.debian.org/876854","label":"bugs.debian.org/876854","hostname":"bugs.debian.org","tags":["X Refsource CONFIRM","Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2017/msg00246.html","label":"lists.debian.org/debian-security-announce/2017/msg00246.html","hostname":"lists.debian.org","tags":["X Refsource CONFIRM","Mailing List","Third Party Advisory","REPORT"]},{"url":"https://public-inbox.org/git/xmqqy3p29ekj.fsf%40gitster.mtv.corp.google.com/T/#u","label":"public-inbox.org/git/xmqqy3p29ekj.fsf%40gitster.mtv.corp.google.com/T/","hostname":"public-inbox.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.securitytracker.com/id/1039431","label":"www.securitytracker.com/id/1039431","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101060","label":"www.securityfocus.com/bid/101060","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3984","label":"www.debian.org/security/2017/dsa-3984","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory","REPORT"]},{"url":"https://advisories.mageia.org/MGASA-2017-0404.html","label":"advisories.mageia.org/MGASA-2017-0404.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21774","label":"bugs.mageia.org/show_bug.cgi?id=21774","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2017/09/26/9","label":"openwall.com/lists/oss-security/2017/09/26/9","hostname":"openwall.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172717-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20172717-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1061041","label":"bugzilla.suse.com/1061041","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14867","label":"www.suse.com/security/cve/CVE-2017-14867","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172747-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20172747-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14867","label":"ubuntu.com/security/CVE-2017-14867","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://public-inbox.org/git/xmqqy3p29ekj.fsf@gitster.mtv.corp.google.com/T/#u","label":"public-inbox.org/git/xmqqy3p29ekj.fsf@gitster.mtv.corp.google.com/T/","hostname":"public-inbox.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3438-1","label":"ubuntu.com/security/notices/USN-3438-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14867","label":"www.cve.org/CVERecord?id=CVE-2017-14867","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-14867","label":"security-tracker.debian.org/tracker/CVE-2017-14867","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14867","label":"nvd.nist.gov/vuln/detail/CVE-2017-14867","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10786-1","SUSE-SU-2025:20049-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10786-1","SUSE-SU-2025:20049-1"]},"timeline":[{"kind":"published","date":"2017-09-28T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T19:42:21.436Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:58:56.450Z","stale":false,"partial":false}}