Lucene search
K

CVE-2024-24579

🗓️ 31 Jan 2024 16:40:35Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 331 Views

stereoscope library version 0.0.1 allows writing to paths outside of temporary directory via crafted OCI tar archive

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Chainguard
CVE-2024-24579 vulnerabilities
31 Jan 202417:15
cgr
Circl
CVE-2024-24579
31 Jan 202418:22
circl
CNNVD
stereoscope path traversal vulnerability
31 Jan 202400:00
cnnvd
Cvelist
CVE-2024-24579 Tar path traversal in stereoscope when processing OCI tar archives
31 Jan 202416:40
cvelist
EUVD
EUVD-2024-0369
3 Oct 202520:07
euvd
Github Security Blog
stereoscope vulnerable to tar path traversal when processing OCI tar archives
31 Jan 202422:39
github
NVD
CVE-2024-24579
31 Jan 202417:15
nvd
OSV
CGA-2Q4Q-6MHR-C6V7
6 Jun 202412:09
osv
OSV
CGA-4M52-R28H-GJW3
6 Jun 202412:22
osv
OSV
CGA-687X-CX28-9FCM
6 Jun 202412:24
osv
Rows per page
NVD
Vulners
Vulnrichment
Node
anchorestereoscopeRange<0.0.1go
[
  {
    "vendor": "anchore",
    "product": "stereoscope",
    "versions": [
      {
        "version": "< 0.0.1",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation