GitHub Advisory DatabaseGHSA-8C8W-F7WP-2JR2Sender can cause a receiver to overwrite files during ZIP extraction in Croc
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
Percentile
31.7%
An issue was discovered in Croc before 9.6.16. A sender can cause a receiver to overwrite files during ZIP extraction.
Affected configurations
References
www.openwall.com/lists/oss-security/2023/09/21/5
github.com/advisories/GHSA-8c8w-f7wp-2jr2
github.com/schollz/croc/commit/4929635eb875d2304e9415b8f4aa62af9e1a2339
github.com/schollz/croc/issues/594
github.com/schollz/croc/pull/698
nvd.nist.gov/vuln/detail/CVE-2023-43616
www.openwall.com/lists/oss-security/2023/09/08/2
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
Percentile
31.7%