Every CVE Search/ Get API key

CVE-2013-7069

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2)...

6.8 MediumFix available

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Exploit likelihood

3.10%Down 3.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Record
CVE-2013-7069
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Record
CVE-2013-7069
Updated
2026-11-02
EUVDEUVD-2013-6865 No score

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Record
EUVD-2013-6865
Updated
2026-11-03
GitHub AdvisoriesGHSA-h295-68h4-jx53 No score

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2)...

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Record
GHSA-h295-68h4-jx53
Weakness
CWE-94
Updated
2026-11-02
OSVopenSUSE-SU-2024:10014-1 No score

ack-2.15_02-1.3 on GA media

These are all security issues fixed in the ack-2.15_02-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10014-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-7069 No score

ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched.

Record
UBUNTU-CVE-2013-7069
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ack
openSUSE:Tumbleweed
before 2.15_02-1.3
2.15_02-1.3

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-7069 is a medium vulnerability (CVSS 6.8) in Beyondgrep Ack, published December 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.10%, the 87th percentile. Fixed in ack 2.15_02-1.3.

References

Show 4 moreShow less
MoveEnter Open