SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-2657

Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before.

MEDIUM 4.6EPSS 0.36%

Does this matter?

Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.

Description

Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before.

CVSS 2.0
4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.36% probability · 29th percentile
CISA KEV
Not listed
Affected
common-lisp-controller/common-lisp-controller
Source
security@debian.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.