CVE-2019-5414

Summary

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.

Affected Software

VendorProductVersion RangeStatus
n/akill-port< 1.3.2affected

Weaknesses

  • CWE-77: Command Injection - Generic (CWE-77)

ADP Enrichment

CVE Program Container

Additional References

References