CVE-2012-1095

no score yetEPSS 1.4%

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-02-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

opensuse:opensuse
opensuse:osc

References

http://lists.opensuse.org/opensuse-updates/2012-03/msg00035.html
http://www.openwall.com/lists/oss-security/2012/02/28/15
http://www.openwall.com/lists/oss-security/2012/02/28/9
http://www.openwall.com/lists/oss-security/2012/03/02/2
https://bugzilla.novell.com/show_bug.cgi?id=749335

Check your stack JSON