The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-20,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| fedoraproject | fedora | 20 |
| redhat | enterprise_linux | 6.0 |
| netcf_project | netcf | * |
| fedoraproject | fedora | 21 |
| fedoraproject | fedora | 22 |
| redhat | enterprise_linux | 7.0 |