PatchTheCVECVE-2017-1000473: Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module name
CVE-2017-1000473 is a high-severity flaw (CVSS 7.8) affecting linux-dash. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root.
Why this priority
- High severity
- Public exploit reference
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 1.1% (top 34%) |
| CISA exploited list | No |
| Weakness | CWE-78 |
| Published | 2018-01-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-1000473?
linux-dash: upgrade to 2.0. Exact commands for each OS are on this page.
Is CVE-2017-1000473 being exploited?
CVE-2017-1000473 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-1000473 affect?
CVE-2017-1000473 affects linux-dash. Severity is high (CVSS 7.8). Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root.
How urgent is CVE-2017-1000473?
Priority 54/100. High severity; Public exploit reference; On your watchlist