OS Command Injection Vulnerability in gala-gopher on Linux

CVE-2024-24890

What is CVE-2024-24890?

The vulnerability in openEuler Gala-Gopher enables OS Command Injection due to improper neutralization of special elements within command execution contexts. This can lead to unauthorized command execution on systems running vulnerable versions of the product. The affected component is located in the program files on Linux systems, specifically within the ioprobe module. Proper mitigation should involve updating to the latest version and applying necessary patches to safeguard against potential exploitation.

References