crossenv vulnerabilities and fixes
Recent CVEs affecting crossenv, with upgrade or downgrade steps. 1 tracked.
crossenv has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-06-07. Highest priority: CVE-2017-16074 (score 48/100).
- CVE-2017-16074 HIGH 7.5 MITIGATE crossenv was a malicious module published with the intent to hijack environment variables
FAQ
How do I fix crossenv vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crossenv being exploited right now?
None of the tracked crossenv CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crossenv CVE should I patch first?
CVE-2017-16074 currently ranks highest (48/100): crossenv was a malicious module published with the intent to hijack environment variables.