p PatchFirst

CVE-2024-27763

CVE-2024-27763

This page contains facts from public vulnerability sources. Check the original advisory before updating.

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELIST environment variable.

CVSS 5.3 · Medium · EPSS 0.2%

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • basicsr PyPI

    Versions
    • 1.3.1
    • 1.3.2
    • 1.3.3
    • 1.3.3.1
    • 1.3.3.10
    • 1.3.3.11
    • 1.3.3.3
    • 1.3.3.4
    • 1.3.3.5
    • 1.3.3.6
    • 1.3.3.7
    • 1.3.3.8
    • 1.3.3.9
    • 1.3.4.0
    • 1.3.4.1
    • 1.3.4.2
    • 1.3.4.3
    • 1.3.4.4
    • 1.3.4.6
    • 1.3.4.7
    • 1.3.4.8
    • 1.3.4.9
    • 1.3.5
    • 1.4.0
    • 1.4.1
    • 1.4.2
    Affected ranges
    • ECOSYSTEM: ≤ 1.4.2

    No fix published

Original sources

Check your server →