What’s Vulnerable › Vulnerabilities
CVE-2015-0859
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2015-12-03 · updated 2026-06-17
- Weakness: CWE-17
Description
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.
Affected products
- Debian Linux: 7.0, 8.0
References
Get alerted when CVE-2015-0859 or the next vulnerability affects your stack