gpsd vulnerabilities
1 known vulnerability in gpsd from NTPsec. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
gpsd: Improper Neutralization of Special Elements used in an OS Command
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot ti