CVE-2014-7817

MEDIUM · CVSS 4.6 EPSS 0.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-7817

Severity

MEDIUM

CVSS

4.6

EPSS

0.58%

Original NVD Description

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".