← All advisories

Critical severity9.1NVD Advisory· Published Jun 16, 2024· Updated Apr 15, 2026

CVE-2024-38448

CVE-2024-38448

Description

htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Shigio Yamaguchi/Globalllm-fuzzy
Range: <=6.6.12
osv-coords5 versions
pkg:rpm/opensuse/global&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/global&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/global&distro=openSUSE%20Tumbleweed pkg:rpm/suse/global&distro=SUSE%20Package%20Hub%2015%20SP5 pkg:rpm/suse/global&distro=SUSE%20Package%20Hub%2015%20SP6
< 6.6.9-bp156.3.3.1+ 4 more
- (no CPE)range: < 6.6.9-bp156.3.3.1
- (no CPE)range: < 6.6.9-bp156.3.3.1
- (no CPE)range: < 6.6.13-1.1
- (no CPE)range: < 6.6.9-bp156.3.3.1
- (no CPE)range: < 6.6.9-bp156.3.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.