CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- Updated
- 2026-11-02
EUVDEUVD-2014-1910 No score
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
EUVD-2014-1910- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w3w7-92w5-6f8r
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
GHSA-w3w7-92w5-6f8r- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
DEBIAN-CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
UBUNTU-CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1845 is a high vulnerability (CVSS 7.8) in Enlightenment, published April 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in e17 0.17.3-3.
References
exchange.xforce.ibmcloud.com/vulnerabilities/91216
git.enlightenment.org/core/enlightenment.git/commit?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b
bugzilla.redhat.com/show_bug.cgi?id=1059410
openwall.com/lists/oss-security/2014/02/03/19
nvd.nist.gov/vuln/detail/CVE-2014-1845
Show 7 moreShow less
github.com/advisories/GHSA-w3w7-92w5-6f8r
security-tracker.debian.org/tracker/CVE-2014-1845
ubuntu.com/security/CVE-2014-1845
cve.org/CVERecord?id=CVE-2014-1845