Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable the non-default delta feature and retrieve an attacker-controlled crafted database and delta file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
pacman 操作系统命令注入漏洞
Vulnerability Description
pacman是一款使用在Linux中的软件包管理器。 pacman 5.2之前版本中的lib/libalpm/sync.c文件的‘apply_deltas()’函数存在操作系统命令注入漏洞。远程攻击者可借助特制请求利用该漏洞在系统上执行任意shell命令。
CVSS Information
N/A
Vulnerability Type
N/A