[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2017-16034":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":13,"technologies":16,"references":18,"score":21,"epss_score":21,"epss_percentile":21,"is_kev":10,"cisa_kev_date_added":22,"cisa_kev_due_date":22,"cisa_ssvc":23,"attack_mappings":29,"exploits":30},359108,"CVE-2017-16034","","Command Injection in pidusage\n\nAffected versions of `pidusage` pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method.\n \nThis package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.\n\nWindows and Linux are not vulnerable. \n\n## Proof of Concept\n```\nvar pid = require('pidusage');\npid.stat('1 && \u002Fusr\u002Flocal\u002Fbin\u002Fpython');\n```\n\n\n## Recommendation\n\nUpdate to version 1.1.5 or later.","2020-09-01T16:49:00Z",{},false,[12],"CWE-77",[14,15],"cpe:2.3:a:pidusage:pidusage:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:pidusage:pidusage:*:*:*:*:*:*:*:*",[17],"Pidusage Pidusage",[19,20],"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2017-16034","https:\u002F\u002Fwww.npmjs.com\u002Fadvisories\u002F356",0,null,{"timestamp":22,"automatable":24,"tech_impact":25,"exploitation":26,"cisa_decision":27,"cisa_remediation_timeline":28},"no","partial","none",{},"FSU",[],[]]