CVE-2001-1022
CVE-2001-1022 is a high-severity vulnerability in Gnu Groff with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 11% places it in the 95th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 11% (95th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Gnu Groff
- Published:
- Last modified:
Description
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
Frequently asked questions
- What is CVE-2001-1022?
- Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
- How severe is CVE-2001-1022?
- CVE-2001-1022 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2001-1022 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 11% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2001-1022?
- CVE-2001-1022 primarily affects Gnu Groff. In total, 7 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2001-1022?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2001-1022 published?
- CVE-2001-1022 was published on 2001-07-26 and last updated on 2026-06-16.
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428
- http://www.debian.org/security/2001/dsa-072
- http://www.debian.org/security/2002/dsa-107
- http://www.osvdb.org/1914
- http://www.redhat.com/support/errata/RHSA-2002-004.html
- http://www.securityfocus.com/archive/1/199706
- http://www.securityfocus.com/bid/3103
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6918
Affected products (7)
- cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*
- cpe:2.3:a:jgroff:jgroff:*:*:*:*:*:*:*:*
More vulnerabilities in Gnu Groff
- CVE-2000-0803 — Critical (CVSS 10.0): GNU Groff uses the current working directory to find a device description file, which allows a local user to gain…
- CVE-2002-0003 — High (CVSS 7.5): Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the…
- CVE-2009-5078 — Medium (CVSS 6.5): contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER…
- CVE-2009-5082 — Low (CVSS 3.3): The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl)…
- CVE-2009-5081 — Low (CVSS 3.3): The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff…
- CVE-2009-5080 — Low (CVSS 3.3): The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh…