CVE-2015-8557

Public on 2015-12-14
Modified on 2015-12-14
Description
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.1
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 python-pygments 2015-12-14 ALAS-2015-630 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2015-8557 Mitre: CVE-2015-8557