egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package     installation via escape characters in a .egg file. (CVE-2022-45145)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package
    installation via escape characters in a .egg file. (CVE-2022-45145)

ID	Name	Product	Family	Severity
258655	Linux Distros Unpatched Vulnerability : CVE-2022-45145	Nessus	Misc.	critical
403805	Alpine: multiple chicken packages: security update to 5.3.0-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
403805	Alpine: multiple chicken packages: security update to 5.3.0-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
409880	Alpine: chicken: security update to 5.3.0-r2 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
409880	Alpine: chicken: security update to 5.3.0-r2 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-45145

critical

Tenable Plugins

critical

critical

critical

critical

critical