What’s Vulnerable › Vulnerabilities

CVE-2015-5186

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-06 · updated 2026-06-17
• Weakness: CWE-20

Description

Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.

Affected products

• Linux Audit Project Linux Audit: through 2.4.3

References

• http://www.openwall.com/lists/oss-security/2015/08/13/9
• http://www.securityfocus.com/bid/76840
• https://bugzilla.redhat.com/show_bug.cgi?id=1251621
• https://people.redhat.com/sgrubb/audit/ChangeLog
• http://www.openwall.com/lists/oss-security/2015/08/13/9
• http://www.securityfocus.com/bid/76840
• https://bugzilla.redhat.com/show_bug.cgi?id=1251621
• https://people.redhat.com/sgrubb/audit/ChangeLog

Get alerted when CVE-2015-5186 or the next vulnerability affects your stack