CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...
CVE-2014-1845 is a high vulnerability (CVSS 7.8) in Enlightenment, published April 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in e17 0.17.3-3.
- Severity
- 7.8 HighCVSS 3.0, NVD
- Exploit chance
- 0.36%EPSS, 30th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.17.3-3e17 +2 more
Description
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- Updated
- 2026-11-02
EUVDEUVD-2014-1910No score
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
EUVD-2014-1910- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w3w7-92w5-6f8r
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
GHSA-w3w7-92w5-6f8r- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
DEBIAN-CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1845
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
- Record
UBUNTU-CVE-2014-1845- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/91216
git.enlightenment.org/core/enlightenment.git/commit?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b
bugzilla.redhat.com/show_bug.cgi?id=1059410
openwall.com/lists/oss-security/2014/02/03/19
nvd.nist.gov/vuln/detail/CVE-2014-1845
Show 7 moreShow less
github.com/advisories/GHSA-w3w7-92w5-6f8r
security-tracker.debian.org/tracker/CVE-2014-1845
ubuntu.com/security/CVE-2014-1845
cve.org/CVERecord?id=CVE-2014-1845